Skip to content
OpenAdvisories

Product · Forocoches

Forocoches comments editor

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Display of information in the Forocoches comments editor

    An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, thei…