Known vulnerabilities in Phorum

Vendor: Phorum.org
Software: Phorum
Software CPE: cpe:2.3:a:phorum_org:phorum:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 8
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Phorum Phorum is affected by 8 known vulnerabilities: 2 medium, 6 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30433 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-3622
CWE-79 Low
No
No
5.2.18 22.01.2020 SB2020012233
#VU41313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6659
CWE-79 Low
No
No
- 19.09.2014 SB2014090402
#VU41357 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4234
CWE-79 Low
Available
No
- 04.09.2014 SB2014090402
#VU44485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4561
CWE-79 Low
Available
No
- 28.11.2011 SB2011112802
#VU44678 - Exposure of sensitive information to an unauthorized actor
CVE-2011-3768
CWE-200 Medium
No
No
- 24.09.2011 SB2011092418
#VU44745 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-3392
CWE-79 Low
No
No
- 08.09.2011 SB2011090801
#VU44749 - Cross-Site Request Forgery (CSRF)
CVE-2011-3381
CWE-352 Medium
No
No
- 08.09.2011 SB2011090803
#VU44750 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-3382
CWE-79 Low
No
No
- 08.09.2011 SB2011090803