Medium severityNVD Advisory· Published Dec 11, 2025· Updated Apr 15, 2026

CVE-2024-58292

Description

XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript into templates and front page settings. Attackers can insert XSS payloads in footer templates and news ticker fields, enabling script execution for all forum users when pages are rendered.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Minibb/Forumllm-fuzzy
Range: = 1.9.12.06

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/52044nvd
www.vulncheck.com/advisories/xmb-forum-persistent-cross-site-scripting-via-admin-templatesnvd
www.xmbforum2.comnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000