Simple Machines

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Simple Machines records in CISA KEV

No Simple Machines vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Machines Forum 21 records LOW Smf 4 records MEDIUM Simple Machines Smf 2 records LOW Opencart 1 record LOW Phpraider 1 record LOW Smf Shoutbox 1 record LOW

Records

1 record in Phpraider · all components

TI-2008-06723 CVE-2008-7035 · GHSA-7pf4-rhx6-6hxp

Cross-site scripting (XSS) vulnerability in an unspecified component in Simple Machines…

LOW 22

Cross-site scripting (XSS) vulnerability in an unspecified component in Simple Machines phpRaider 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the resistance field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2009-08-24 No fix listed CWE-79

Open these records in search →

Critical	0
High	10
Medium	20
Low	0
No CVSS	0