📦 Flarum

This vulnerability in Flarum forum software allows attackers to inject malicious HTML/JavaScript into user input fields, which executes in victims' browsers. It affects all Flarum communities running ...

This CVE describes a session hijacking vulnerability in Flarum forum software where an attacker controlling any subdomain under a parent domain can set cookies scoped to the parent domain, potentially...