Vanillaforums

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 26
    Known Exploited: 0
    2
    Critical Level Threats
    6
    High Level Threats
    16
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2010-4266

    It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher.

    Last Modified: Nov 21, 2024
    Published: Jun 22, 2021

    CVE-2010-4264

    It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.

    Last Modified: Nov 21, 2024
    Published: Jun 22, 2021

    CVE-2020-8825

    index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.

    Last Modified: Nov 21, 2024
    Published: Feb 10, 2020

    CVE-2011-1009

    Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.

    Last Modified: Nov 21, 2024
    Published: Feb 05, 2020

    CVE-2011-3614

    An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.

    Last Modified: Nov 21, 2024
    Published: Jan 22, 2020
    Items Per Page
    Vanillaforums Vulnerabilities & Security CVEs | CVE-DB