Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-39514 1 Asgaros 1 Asgaros Forum 2026-04-23 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asgaros Asgaros Forum asgaros-forum allows Stored XSS.This issue affects Asgaros Forum: from n/a through <= 3.2.1.
CVE-2021-25045 1 Asgaros 1 Asgaros Forum 2024-11-21 7.2 High
The Asgaros Forum WordPress plugin before 1.15.15 does not validate or escape the forum_id parameter before using it in a SQL statement when editing a forum, leading to an SQL injection issue
CVE-2021-24827 1 Asgaros 1 Asgaros Forum 2024-11-21 9.8 Critical
The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue