Login Request a demo
DI
Product
Discuzx
by Discuz · last CVE Apr 11, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 2Medium 6Low 0
Severity
All severities9Critical1High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Discuzx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-45543
6.1
1%
Feb 15
Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search
Affected: 3.4
CVE-2018-5376
6.1
1%
Jan 12
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter
Affected: 3.4
CVE-2018-5375
6.1
1%
Jan 12
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action
Affected: x3.4
CVE-2018-10298
5.4
1%
Apr 22
Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content
Affected: through x3.4
CVE-2018-10297
5.4
1%
Apr 22
Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images
Affected: through x3.4
CVE-2018-5331
5.4
1%
Jan 10
Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php
Affected: x3.4
Showing 6