CVE-2010-4264: Vanillaforums Vanilla Forums

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.

Affected products

• Vanillaforums Vanilla Forums: before 2.0.10 (fixed in 2.0.10)

Published 2021-06-22. Last modified 2026-06-16.