Skip to content
OpenAdvisories

Product · flarum

framework

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2022-41938

    Cross site scripting vulnerability with discussion titles in flarum

    Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be converted into HTML DOM nodes when pages were rendered. The change was made after `v1.5` and was not noticed. This allowed an attacker to inject malicious H…

    flarum framework flarum/core Packagist