PatchTheCVExiunobbs vulnerabilities and fixes
Recent CVEs affecting xiunobbs, with upgrade or downgrade steps. 5 tracked.
xiunobbs has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-07. Highest priority: CVE-2020-21493 (score 44/100).
- CVE-2020-21496 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows
- CVE-2020-21495 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows
- CVE-2020-21494 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows atta
- CVE-2020-21493 MEDIUM 5.3 DOWNGRADE An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.
- CVE-2020-19914 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML v
FAQ
How do I fix xiunobbs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xiunobbs being exploited right now?
None of the tracked xiunobbs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xiunobbs CVE should I patch first?
CVE-2020-21493 currently ranks highest (44/100): An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames..