PT-2020-7497 · Simple Machines · Simple Machines Forum

Kurt Seifried + 1 · Published 2020-02-12 · Updated 2020-02-21 · CVE-2013-4395

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum (SMF) versions through 2.0.5

Description: The issue affects Simple Machines Forum, allowing for cross-site scripting (XSS) attacks.

Recommendations: For versions through 2.0.5, update to a version that contains a fix for this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-4395

Affected Products

Simple Machines Forum

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-4395 · Security Note
• http://openwall.com/lists/oss-security/2013/10/01/8 · Note
• http://openwall.com/lists/oss-security/2013/10/02/1 · Note
• http://openwall.com/lists/oss-security/2013/10/02/3 · Note