Description
Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter.
Remediation
References
Related Vulnerabilities
PHP Out-of-bounds Read Vulnerability (CVE-2019-11036)
WordPress Plugin BP Code Snippets Cross-Site Scripting (2.0)
WordPress Plugin WP Business Intelligence Lite SQL Injection (1.6.1)
WordPress Plugin Dean's FCKEditor with pwwang's code Arbitrary File Upload (1.0.0)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.13)