CVE-2017-12138: Xoops

Medium severity, CVSS 6.1. EPSS: 3.4% chance of exploitation in the next 30 days.

XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.

Affected products

• Xoops Xoops: version 2.5.8 only

Published 2017-08-02. Last modified 2026-06-17.