CVE-2021-43677

45th percentile - higher than 45% of all known CVEs

Fluxbb version 1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability. This allows an attacker to inject malicious JavaScript code into pages viewed by other users.

The risk includes potential theft of user sessions, compromise of administrator accounts, or distribution of malware within the forum.

Immediately update Fluxbb to the latest available version that fixes this vulnerability. If an update is not possible, apply temporary mitigations such as input filtering.