Unrated severityNVD Advisory· Published Jan 15, 2008· Updated Jun 16, 2026

CVE-2008-0284

Description

Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.

Affected products

Simple Machines/Smf2 versions
cpe:2.3:a:simple_machines:simple_machines_smf:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:simple_machines:simple_machines_smf:*:*:*:*:*:*:*:*range: <=1.1.4
- (no CPE)range: <=1.1.4
Simple Machines/Simple Machines Forumllm-fuzzy
Range: <=1.1.4

Patches

Vulnerability mechanics

References

securityreason.com/securityalert/3540nvd
www.securityfocus.com/archive/1/486074/100/0/threadednvd
www.securityfocus.com/bid/27218nvd
exchange.xforce.ibmcloud.com/vulnerabilities/39585nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000