Cross-Site Scripting Vulnerability in Simple Machines Forum by Simple Machines
CVE-2011-1129

Currently unrated

Key Information:

Vendor: Simplemachines
Status: Smf
Vendor: CVE Published:; 21 June 2011

🔔 Create Simplemachines Vulnerability Alert

What is CVE-2011-1129?

A vulnerability exists in the EditNews function of ManageNews.php within Simple Machines Forum that allows remote authenticated users to inject arbitrary scripts or HTML through the 'save_items' action. This cross-site scripting flaw can be exploited to compromise user data and web application integrity, making it a significant security concern for instances running unsupported versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch