CVE-2008-4513

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-10-09 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags.

Affected products

Phorum: 5.2.8

References

http://nulledcore.com/?p=126
http://secunia.com/advisories/32225
http://trac.phorum.org/changeset/3528
http://www.phorum.org/phorum5/read.php?64%2C133699
http://www.securityfocus.com/bid/31589
https://exchange.xforce.ibmcloud.com/vulnerabilities/45686
http://nulledcore.com/?p=126
http://secunia.com/advisories/32225
http://trac.phorum.org/changeset/3528
http://www.phorum.org/phorum5/read.php?64%2C133699
http://www.securityfocus.com/bid/31589
https://exchange.xforce.ibmcloud.com/vulnerabilities/45686

Get alerted when CVE-2008-4513 or the next vulnerability affects your stack