Xiuno Xiunobbs
7 CVEs affecting Xiuno Xiunobbs. Latest disclosed: 2022-09-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-19998 | High | 7.5 | 2019-12-26 | Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php. |
CVE-2020-19914 | Medium | 6.1 | 2022-09-07 | Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function. |
CVE-2020-21496 | Medium | 6.1 | 2021-10-04 | A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HT… |
CVE-2020-21495 | Medium | 6.1 | 2021-10-04 | A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HT… |
CVE-2020-21494 | Medium | 6.1 | 2021-10-04 | A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML vi… |
CVE-2018-15559 | Medium | 6.1 | 2018-08-20 | The editor in Xiuno BBS 4.0.4 allows stored XSS. |
CVE-2020-21493 | Medium | 5.3 | 2021-10-04 | An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames. |