CVE Intelligence

Simplemachines Simple Machines Forum vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Simplemachines Simple Machines Forum: 1 record(s), with affected versions and fixes.
cpe:2.3:a:simplemachines:simple_machines_forum

CVE-2025-67163 Medium · 6.1 CWE-20 Dec 18, 2025
Improper Input Validation in Simplemachines Simple Machines Forum
A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Forum Name parameter.