Mm Forum Project

mm_forum_project

4 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-15516 1Mm Forum Project 1Mm Forum Nov 21, 2024 Jul 7, 2020 N/A· v4 5.4 MEDIUM· v3 5.8 MEDIUM· v2 The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.
CVE-2014-6299 1Mm Forum Project 1Mm Forum May 6, 2026 Oct 3, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows remote attackers to hijack the authentication of users for requests that create posts via unspecified vectors.
CVE-2014-6298 1Mm Forum Project 1Mm Forum May 6, 2026 Oct 3, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Unrestricted file upload vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecifie...Show more Unrestricted file upload vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.Show less
CVE-2014-6297 1Mm Forum Project 1Mm Forum May 6, 2026 Oct 3, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the mm_forum extension before 1.9.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.