CVE-2002-0319: Powie Pforum

High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username.

Affected products

• Powie Pforum: version 1.11 only; version 1.12 only; version 1.13 only; version 1.14 only

Published 2002-06-25. Last modified 2026-06-16.