CVE-2011-3382

Phorum <5.2.16 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Phorum before 5.2.16 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Third Party Advisory] http://jvn.jp/en/jp/JVN71435255/index.html

[Third Party Advisory] http://jvndb.jvn.jp/jvndb/JVNDB-2011-000068

[Various Sources] http://www.phorum.org/phorum5/read.php?64%2C147504

Scores

EPSS 0.0025

EPSS Percentile 48.5%

Classification

CWE

CWE-79

Status published

Affected Products (50)

phorum/phorum < 5.2.15

phorum/phorum

... and 35 more

Timeline

Published Sep 08, 2011

Tracked Since Feb 18, 2026