VendorsDiscuz!discuzxall versions
Vulnerabilities

Discuz! DiscuzX

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2018-5377
Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.
Published 2018-01-12 · Modified
9.8EPSS 0.021
CVE-2018-5259
Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.
Published 2018-01-08 · Modified
8.8EPSS 0.020
CVE-2024-30884
Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.
Published 2024-04-11 · Analyzed
7.1EPSS 0.005
CVE-2018-5376
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.
Published 2018-01-12 · Modified
6.1EPSS 0.008
CVE-2018-5375
Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_space.php appid parameter in a delete action.
Published 2018-01-12 · Modified
6.1EPSS 0.008
CVE-2022-45543
Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search.
Published 2023-02-15 · Modified
6.1EPSS 0.005
CVE-2018-5331
Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.
Published 2018-01-10 · Modified
5.4EPSS 0.006
CVE-2018-10297
Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images.
Published 2018-04-22 · Modified
5.4EPSS 0.005
CVE-2018-10298
Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.
Published 2018-04-22 · Modified
5.4EPSS 0.005