Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Xenforo Subscribe
Filtered by product Xenforo
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-43032 1 Xenforo 1 Xenforo 2021-11-05 3.5 LOW 4.8 MEDIUM
In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertisement via the Advertising function, and save an XSS payload in the body of the HTML document. This payload will execute globally on the client side.