Vendors / Discuz! Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 6
Exploited now Discuz! records in CISA KEV No Discuz! vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00526 · Published 2024-04-11 · No fix listed CWE-79
Priority MEDIUM 60
Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00535 · Published 2023-02-15 · No fix listed CWE-79
Priority MEDIUM 46
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02093 · Published 2018-01-12 · No fix listed CWE-862
Priority MEDIUM 42
Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01964 · Published 2018-01-08 · No fix listed
Priority LOW 29
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00831 · Published 2018-01-12 · No fix listed CWE-79
Priority LOW 29
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00829 · Published 2018-01-12 · No fix listed CWE-79
Priority LOW 25
Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00513 · Published 2018-04-22 · No fix listed CWE-79
Priority LOW 25
Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00513 · Published 2018-04-22 · No fix listed CWE-79
Priority LOW 25
Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00641 · Published 2018-01-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 6 7 0 0
THREATIST.IORead the docs