Approved changes feed: RSS · Atom

cpe:2.3:a:fluxbb:fluxbb:1.5.11:*:*:*:*:*:*:*

part: a version: 1.5.11 update: *

VendorFluxbb (5352a7d5-7e27-549d-9c4b-be955fca6c99)
ProductFluxbb (50d12c6f-6d4b-556f-afe9-2d210b8cc0df)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/fluxbb/fluxbb purl2cpe 2026-06-01 10:15:09.574450

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-44110 vulnerable 2026-06-08 07:25:10.639834 Details available
FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php.
Published: 2025-05-15T00:00:00.000Z
Updated: 2025-05-16T13:43:32.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35240 vulnerable 2026-06-08 05:25:00.992667 Details available
FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.
Published: 2020-12-30T14:23:14.000Z
Updated: 2024-08-04T17:02:07.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28873 vulnerable 2026-06-08 05:23:56.520776 Details available
Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server.
Published: 2021-03-17T12:31:52.000Z
Updated: 2026-07-09T00:11:59.898Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.