Vendors / FluxBB Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now FluxBB records in CISA KEV No FluxBB vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00262 · Published 2025-05-15 · No fix listed CWE-79
Priority MEDIUM 45
Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a ..
CVSS 2.0 HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02576 · Published 2015-02-03 · No fix listed CWE-22
Priority MEDIUM 44
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01197 · Published 2020-01-22 · Fixed in 1.4.7
Priority LOW 38
SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0257 · Published 2015-01-13 · No fix listed CWE-89
Priority LOW 34
Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00858 · Published 2021-03-17 · No fix listed CWE-916
Priority LOW 29
Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url p…
CVSS 2.0 MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01633 · Published 2015-01-13 · No fix listed
Priority LOW 28
Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00641 · Published 2022-01-04 · No fix listed CWE-79
Priority LOW 24
FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0103 · Published 2020-12-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 2 4 0 0
THREATIST.IORead the docs