Vulnerabilities in FriendsOfFlarum

3 results

CVE-2022-30999HIGHPossible cross-site scripting attack via unsanitized SVG files in FoF UploadEPSS 1.3%CVE-2022-35921LOWUser preference to prevent private discussions not respected in fof/byobuEPSS 0.5%CVE-2026-92161CRITICALFriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth providerEPSS 0.3%