Vulnerability in Bbpress

CVE-2007-3244

SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrary SQL commands via unspecified vectors to forums/bb-edit.php, as demonstrated by a PRE element, aka the "quircky slashes bug."

EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.

Affected products

  • Bbpress — versions 0.8
  • N/a — versions n/a

References