Login Request a demo
FL
Product
Fluxbb
by Fluxbb · last CVE May 15, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities8Critical1High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fluxbb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2011-3621
9.8
1%
Jan 22
A reverse proxy issue exists in FluxBB before 1.4.7 when FORUM_BEHIND_REVERSE_PROXY is enabled
Affected: before 1.4.7
CVE-2020-28873
7.5
1%
Mar 17
Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form
Affected: 1.5.11
CVE-2021-43677
6.1
1%
Jan 4
Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability
Affected: 1.4.12
CVE-2025-44110
5.4
0%
May 15
FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php
Affected: 1.5.11
CVE-2020-35240
4.8
1%
Dec 30
FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component
Affected: 1.5.11
CVE-2014-9574
–
3%
Feb 3
Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a
Affected: through 1.5.7
CVE-2014-10030
–
2%
Jan 13
Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct…
Affected: through 1.4.11; 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; +2 more
CVE-2014-10029
–
3%
Jan 13
SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the req_new_email parameter
Affected: through 1.4.11; 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; +2 more
Showing 8