fudforum vulnerabilities and fixes
Recent CVEs affecting fudforum, with upgrade or downgrade steps. 2 tracked.
fudforum has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-04-17. Highest priority: CVE-2024-30951 (score 34/100).
- CVE-2024-30951 MEDIUM 6.1 DOWNGRADE FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos p
- CVE-2024-30950 LOW 3.5 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web
FAQ
How do I fix fudforum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fudforum being exploited right now?
None of the tracked fudforum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fudforum CVE should I patch first?
CVE-2024-30951 currently ranks highest (34/100): FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos p.