CVE-2022-25091: Infopop Ultimate Bulletin Board

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be disclosed by unauthenticated users via the quote reply feature.

Affected products

• Infopop Ultimate Bulletin Board: up to and including 5.47a

Published 2023-04-27. Last modified 2026-06-17.