CVE-2007-2248: Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attac...

Security readout for executives and security teams

This is a legacy Phorum forum software issue where crafted input to admin.php could run attacker-controlled script in a victim’s browser. The main business risk is account/session compromise or unauthorized administrative actions if a vulnerable Phorum instance is still in use. Exposure is likely limited to organizations still running Phorum versions before 5.1.22. Risk is higher if the Phorum administrative interface is reachable by untrusted users or if privileged users can be induced to view attacker-controlled content. Prioritize this if legacy Phorum remains deployed, especially on public sites. If no Phorum is present, record it as not applicable. The age of the issue reduces urgency only after inventory confirms no vulnerable deployment remains. Mitigation focus: Upgrade Phorum to 5.1.22 or later where applicable.; Check current vendor guidance before applying compensating controls.; Restrict access to Phorum administrative interfaces..

Prepared

Jun 29, 2026, 05:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.