发布 2025-03-20 漏洞条目

FluxBB 1.5.11 – Stored Cross-Site Scripting (XSS)

Exploit Source

# Exploit Title: FluxBB 1.5.11 Stored xss

# Date: 3/8/2025

# Exploit Author: Chokri Hammedi

# Vendor Homepage: www.fluxbb.org

# Software Link: https://www.softaculous.com/apps/forums/FluxBB

# Version: FluxBB 1.5.11

# Tested on: Windows XP

1. login to admin panel

2. go to /admin_forums.php

3. click on "add forum"

4. in description text area put this payload:

5. save changes

now everytime users enter the home page will see the alert.

相关漏洞条目