VULNERABILITY INTELLIGENCE

CVE-2011-3392

CVSS score4.3 MEDIUM

EPSS probability1.09%

CISA KEVNot currently listed

Published2011-09-08

Last modified2026-06-16

Description

Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter.