CVE-2008-0284

MEDIUM 4.3CVE-2008-0284 · Published 15/01/2008 · updated 16/06/2026

In short

CVE-2008-0284 is a MEDIUM (CVSS 4.3) vulnerability affecting simple machines smf (simple machines).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple machines smf simple_machines	`≤ 1.1.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.

References

securityreason.com/securityalert/3540
securityfocus.com/archive/1/486074/100/0/threaded
securityfocus.com/bid/27218
exchange.xforce.ibmcloud.com/vulnerabilities/39585

More vulnerabilities in simple machines smf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free