Fluxbb

8 CVEs across 1 Fluxbb products. Browse Fluxbb vulnerabilities, severities, and proof-of-concept exploits.

Fluxbb products with known CVEs

ProductCVEs
Fluxbb8
Fluxbb CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-44110Medium5.42025-05-15FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php.
CVE-2021-43677Medium6.12022-01-04Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
CVE-2020-28873High7.52021-03-17Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sen…
CVE-2020-35240Medium4.82020-12-30FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Bl…
CVE-2011-3621Critical9.82020-01-22A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled.
CVE-2014-95742015-02-03Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a…
CVE-2014-100302015-01-13Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites…
CVE-2014-100292015-01-13SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req…