Fluxbb
4 CVEs across 1 Fluxbb products. Browse Fluxbb vulnerabilities, severities, and proof-of-concept exploits.
Fluxbb products with known CVEs
Fluxbb CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-44110 | Medium | 5.4 | 2025-05-15 | FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php. |
CVE-2021-43677 | Medium | 6.1 | 2022-01-04 | Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability. |
CVE-2020-28873 | High | 7.5 | 2021-03-17 | Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sen… |
CVE-2020-35240 | Medium | 4.8 | 2020-12-30 | FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Bl… |
CVE-2011-3621 | Critical | 9.8 | 2020-01-22 | A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled. |
CVE-2014-9574 | | | 2015-02-03 | Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a… |
CVE-2014-10030 | | | 2015-01-13 | Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites… |
CVE-2014-10029 | | | 2015-01-13 | SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req… |