CVE-2011-1009: Vanillaforums Vanilla

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.

Affected products

• Vanillaforums Vanilla: from 2.0.17.1, up to and including 2.0.17.5

Published 2020-02-05. Last modified 2026-06-16.