bbPress Cross-site Scripting (XSS) vulnerability

MEDIUM 6.1CVE-2011-1150 · GHSA-483f-wxw9-3rpq · Published 05/02/2020 · updated 16/06/2026

Package	Affected versions	Patched versions
bbpress/bbpress Packagist	`≤ 1.0.2`	No fix yet
bbpress bbpress	`≤ 1.0.2`	No fix yet

Description

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.

NVD description

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.