Medium · 4.3 CVE-2022-38055 EUVD-2022-40660GHSA-qp9c-v274-2239

WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability

Published Jun 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: gVectors Team Product: wpForo Forum

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This issue affects wpForo Forum: from n/a through 2.0.9.

Affected products

Vendor	Product	Affected	Fixed
gVectors Team	wpForo Forum	≤ 2.0.9	—

References

https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-auth-html-injection-vulnerability?_s_id=cve vdb-entry