Online Discussion Forum Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Online Discussion Forum Project records in CISA KEV

No Online Discussion Forum Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2022-13312 CVE-2022-31296 · GHSA-9p9p-64q6-hgqm

MEDIUM 47

Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02432 Published 2022-06-17 No fix listed CWE-89

TI-2024-05327 CVE-2024-5733 · GHSA-rf2w-v629-wf4f

LOW 33

A vulnerability was found in itsourcecode Online Discussion Forum 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00622 Published 2024-06-07 No fix listed CWE-89

TI-2024-05328 CVE-2024-5734 · GHSA-vfhg-qvc9-3fr9

LOW 25

A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00618 Published 2024-06-07 No fix listed CWE-434

TI-2020-17110 CVE-2020-28141 · GHSA-r9fr-9cp6-7c2h

LOW 25

The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2021-04-19 No fix listed CWE-79