Skip to content
OpenAdvisories

Vendor

flarum

18 known vulnerabilities.

Products

framework 10 Flarum Framework 2 FriendsofFlarum Pretty Mail 2 core 1 Extension Manager 1 nicknames 1 sticky 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-41938

    Cross site scripting vulnerability with discussion titles in flarum

    Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be converted into HTML DOM nodes when pages were rendered. The change was made after `v1.5` and was not noticed. This allowed an attacker to inject malicious H…

    flarum framework flarum/core Packagist
  • Critical 10.0
    CVE-2021-32671 EPSS 40%

    XSS vulnerability with translator

    Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to be converted into HTML DOM nodes when rendered. This change was made after v0.1.0-beta.16 (our last beta before v1.0.0) and was not noticed or docume…

    flarum core flarum/core Packagist