PT-2025-21350 · Fluxbb · Fluxbb

Published 2025-05-15 · Updated 2025-06-12 · CVE-2025-44110

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FluxBB version 1.5.11

Description The issue is related to Cross Site Scripting (XSS) via the Forum Description Field in admin forums.php. This allows for potential malicious script execution. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For FluxBB version 1.5.11, update to a version that fixes the Cross Site Scripting (XSS) issue in the Forum Description Field in admin forums.php. As a temporary workaround, consider restricting access to the admin forums.php page to minimize the risk of exploitation. Avoid using the Forum Description Field until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-44110

Affected Products

Fluxbb

References · 6

• 🔥 https://packetstorm.news/files/id/189672 · Exploit
• https://osv.dev/vulnerability/CVE-2025-44110 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-44110 · Security Note
• https://twitter.com/CVEnew/status/1923081211498594600 · Twitter Post
• https://t.me/cvenotify/125481 · Telegram Post
• https://twitter.com/dailycve/status/1933180224872624527 · Twitter Post