Skip to content
OpenAdvisories

Package · Packagist

flarum/mentions

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.7
    CVE-2023-22487

    Post mentions can be used to read any post on the forum without access control

    Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mentions extension, users can mention any post ID on the forum with the special `@"<username>"#p<id>` syntax. The following behavior never changes no matter…

    flarum framework flarum/mentions Packagist