Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch.
Max CVSS
4.3
EPSS Score
1.11%
Published
2004-12-31
Updated
2017-07-11
1 vulnerabilities found