Discuz! DiscuzX 3.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:discuz:discuzx:3.4:*:*:*:*:*:*:*

part: a version: 3.4 update: *

VendorDiscuz (0935b7c3-594c-5130-abae-96ba39e4073f)
ProductDiscuzx (48dd0bbd-193a-57b3-b0d3-3cf0bafc1f62)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/nsf-trc/discuzx purl2cpe 2026-06-01 10:16:40.912724
pkg:github/codersclub/discuzx purl2cpe 2026-06-01 10:16:40.912727
pkg:sourceforge/discuz31 purl2cpe 2026-06-01 10:16:40.912730

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30884 vulnerable 2026-06-08 06:35:30.713051 Details available
Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.
Published: 2024-04-11T00:00:00.000Z
Updated: 2024-08-02T01:39:00.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45543 vulnerable 2026-06-08 05:50:36.499233 Details available
Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-19T17:58:10.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5376 vulnerable 2026-06-08 05:11:50.686495 Details available
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.
Published: 2018-01-12T09:00:00.000Z
Updated: 2024-09-17T00:32:20.642Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.