← All advisories

Medium severity4.8OSV Advisory· Published Aug 5, 2018· Updated Jun 17, 2026

CVE-2018-14937

CVE-2018-14937

Description

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.

Affected products

2

My Little Forum/MylittleforumOSV2 versions
2.3.99.3, 2.4, 2.4.1, …+ 1 more
- (no CPE)range: 2.3.99.3, 2.4, 2.4.1, …
- (no CPE)range: =2.4.12

Patches

Vulnerability mechanics

References

1

owendarlene.com/stored-xss-my-little-forum/nvdExploitThird Party AdvisoryURL Repurposed

News mentions

0

No linked articles in our index yet.