Vulnerabilities (CVE)

Filtered by vendor Simple Machines Subscribe
Filtered by product Simple Machines Smf
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-0284 1 Simple Machines 1 Simple Machines Smf 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.
CVE-2004-1827 2 Simple Machines, Yabb 2 Simple Machines Smf, Yabb 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.