resulted in an alert box appearing on the forum. This attack could also be modified to perform AJAX requests on behalf of a user, possibly deleting discussions, modifying their settings or profile, or even modifying settings on the Admin panel if the attack was targetted towards a privileged user. All Flarum communities that run flarum v1.0.0 or v1.0.1 are impacted. The vulnerability has been fixed and published as flarum/core v1.0.2. All communities running Flarum v1.0 have to upgrade as soon as possible to v1.0.2.","identifier":"CVE-2021-32671","datePublished":"2021-06-07","dateModified":"2024-08-03","url":"https://app.rapidriskradar.com/cve/CVE-2021-32671","publisher":{"@type":"Organization","name":"Rapid Risk Radar"}}
Highest-risk unexploited with PoCs
Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS
Actively Exploited
Confirmed exploited in the wild, sorted by most recently updated
Recently Updated
CVEs with the most recent data changes, published in the last 30 days
