Codologic Codoforum vulnerabilities

• codologic codoforum Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute... CVE-2020-22540 5.4 MediumApril 15, 2024
• codoforum An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows... CVE-2020-22539 7.2 HighApril 15, 2024
• codologic codoforum Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo... CVE-2022-31854 Public exploit EPSS 32.5% 7.2 HighJuly 7, 2022
• codologic codoforum A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2... CVE-2020-25875 5.4 MediumJuly 9, 2021
• codologic codoforum A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2... CVE-2020-25876 5.4 MediumJuly 9, 2021
• codologic codoforum A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0... CVE-2020-25879 5.4 MediumJuly 9, 2021
• codologic codoforum A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum... CVE-2020-13873 9.8 CriticalMay 12, 2021
• codologic codoforum Codoforum 4.8.8 allows self-XSS via the title of a new topic. CVE-2020-9007 5.4 MediumFebruary 16, 2020
• codologic codoforum Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal... CVE-2020-7050 5.4 MediumFebruary 15, 2020
• codologic codoforum An issue was discovered in Codologic Codoforum 4.8.4. While creating a new topic as a normal user... CVE-2020-7051 6.1 MediumFebruary 13, 2020
• codologic codoforum Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php... CVE-2020-5842 Public exploit 6.1 MediumJanuary 7, 2020
• codologic codoforum Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen. CVE-2020-5843 4.8 MediumJanuary 7, 2020
• codologic codoforum Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content. CVE-2020-5306 4.8 MediumJanuary 5, 2020
• codologic codoforum Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the... CVE-2020-5305 4.8 MediumJanuary 5, 2020
• codologic codoforum The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory... CVE-2014-9261 Public exploit 5.0 MediumMarch 23, 2015