CVE-2018-14937: Mylittleforum My Little Forum

Medium severity, CVSS 4.8. EPSS: 0.9% chance of exploitation in the next 30 days.

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.

Affected products

• Mylittleforum My Little Forum: version 2.4.12 only

Published 2018-08-05. Last modified 2026-06-17.