VendorsSimple Machinessimple_machines_forum2.1.6
Vulnerabilities

Simple Machines Forum 2.1.6

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2025-67163
A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Forum Name parameter.
Published 2025-12-18 · Analyzed
6.1EPSS 0.003