Known Vulnerabilities for products from Jforum
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Jforum".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-26173 json | JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.p... | Not Provided | 2022-06-16 | 2026-07-09 |
| CVE-2021-40509 json | ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature. | 5.4 - MEDIUM | 2021-09-04 | 2021-09-09 |
| CVE-2019-7550 json | In JForum 2.1.8, an unauthenticated, remote attacker can enumerate whether a user exists by using the "create user" function.... | 5.3 - MEDIUM | 2019-02-12 | 2020-08-24 |
| CVE-2013-7209 json | Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers t... | Not Provided | 2013-12-30 | 2026-04-29 |
| CVE-2012-5338 json | Open redirect vulnerability in JForum 2.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phis... | Not Provided | 2013-09-23 | 2026-04-29 |
| CVE-2012-5337 json | Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arbitrary... | Not Provided | 2013-02-24 | 2026-04-29 |
Known software with vulnerabilities from Jforum
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Jforum | Jforum | - |