Skip to content
OpenAdvisories

Product · flarum

nicknames

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2026-30913

    flarum/nickname: Display name injection in notification emails (autolink & markdown)

    Flarum is open-source forum software. When the flarum/nicknames extension is enabled, a registered user can set their nickname to a string that email clients interpret as a hyperlink. The nickname is inserted verbatim into plain-text notification emails, and …

    flarum nicknames flarum/nicknames Packagist