[MEDIUM] phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting

PKSA-dmph-f4h1-4c7c CVE-2023-5917 GHSA-gmx8-8rff-qv6q

Affected version: <3.3.11

Reported by:
GitHub

[MEDIUM] phpBB allows CSRF

PKSA-tqfr-br33-x7t7 CVE-2020-5502 GHSA-69q7-hww4-8pjq

Affected version: <=3.2.8

Reported by:
GitHub

[MEDIUM] phpBB Cross-Site Request Forgery (CSRF)

PKSA-q7ss-3rhj-ddrt CVE-2019-13376 GHSA-6mh2-98gr-wv76

Affected version: <=3.2.7

Reported by:
GitHub

[MEDIUM] phpBB Server side request forgery (SSRF)

PKSA-ky55-xhxx-k8n8 CVE-2019-11767 GHSA-4hx9-p925-qcv7

Affected version: <3.2.6

Reported by:
GitHub

[HIGH] phpBB Denial of Service

PKSA-hm89-vsd6-zc2r CVE-2019-9826 GHSA-6pgr-x867-h7jx

Affected version: <3.2.6

Reported by:
GitHub

[HIGH] phpBB Remote Code Execution

PKSA-64gs-zcr1-8gvs CVE-2018-19274 GHSA-h3mr-q96r-37v4

Affected version: <3.2.4

Reported by:
GitHub

[MEDIUM] Vulnerability which allows remote image dimensions check to be used to SSRF

PKSA-fvv8-yym2-vcvr CVE-2020-8226 GHSA-jhm9-h84h-rw83

Affected version: >=3.2.0,<3.2.10|>=3.3.0,<3.3.1

Reported by:
GitHub, FriendsOfPHP/security-advisories