CVE-2013-7467: Simplemachines Simple Machines Forum

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.

Affected products

• Simplemachines Simple Machines Forum: version 2.0.4 only

Published 2019-03-07. Last modified 2026-06-17.