FriendsOfFlarum vulnerabilities
3 published CVEs name FriendsOfFlarum among the affected products.
- 3Published CVEs3 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-92161
FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider
FriendsOfFlarum · oauth
Critical9.8 - CVE-2022-35921
User preference to prevent private discussions not respected in fof/byobu
FriendsOfFlarum · byobu
Low3.5 - CVE-2022-30999
Possible cross-site scripting attack via unsanitized SVG files in FoF Upload
FriendsOfFlarum · upload
High8.7