medium6.1Public exploit code
CVE-2021-27520
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FUDForum 3.1.0 - 'author' Reflected XSS2021-06-03 · webapps · php
Impact
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fudforum | Fudforum | Version 3.1.0 |