Approved changes feed: RSS · Atom
cpe:2.3:a:elkarte_forum:elkarte:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Elkarte Forum (2f43bc06-ef11-5d01-bb89-b9dabfbc5f62) |
|---|---|
| Product | Elkarte (0e9c0141-8806-5ff0-b883-2ddd44df47c5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-72553 |
vulnerable | 2026-09-16 04:33:09.038531 |
ElkArte Forum ElkArte - Cross-Site Scripting
MEDIUM (5.4)
A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persistent JavaScript into the profile fields cust_blurb and cust_locate. The fields are saved without HTML encoding and rendered unescaped in profile views visible to administrators. An attacker can craft a payload that executes in an administrator session, enabling session hijacking or privilege escalation.
Published: 2026-08-11T11:11:01.806Z
Updated: 2026-08-11T15:16:23.690Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.