← All advisories

Medium severity5.4NVD Advisory· Published Sep 4, 2021· Updated Jun 17, 2026

CVE-2021-40509

CVE-2021-40509

Description

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Jforum/Jforumllm-fuzzy2 versions
=2.7.0+ 1 more
- (no CPE)range: =2.7.0
- cpe:2.3:a:jforum:jforum:2.7.0:*:*:*:*:*:*:*
JForum2/JForum2description

Patches

Vulnerability mechanics

References

4

sourceforge.net/p/jforum2/code/934/nvdPatchThird Party Advisory
lists.openwall.net/full-disclosure/2021/09/03/7nvdExploitMailing ListThird Party Advisory
packetstormsecurity.com/files/164045/jforum-2.7.0-Cross-Site-Scripting.htmlnvdThird Party Advisory
seclists.org/fulldisclosure/2021/Sep/13nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.