[MEDIUM] phpBB's Smiley Pack acp_icons.php main pack vulnerable to cross site scripting

PKSA-dmph-f4h1-4c7c CVE-2023-5917 GHSA-gmx8-8rff-qv6q

Affected version: <3.3.11

Reported by:
GitHub

[MEDIUM] phpBB Cross-Site Request Forgery (CSRF)

PKSA-wdkg-4wdb-b14k CVE-2020-5501 GHSA-cpqc-g4r8-6hxg

Affected version: =3.2.8

Reported by:
GitHub

[MEDIUM] phpBB allows CSRF

PKSA-tqfr-br33-x7t7 CVE-2020-5502 GHSA-69q7-hww4-8pjq

Affected version: <=3.2.8

Reported by:
GitHub

[MEDIUM] Vulnerability which allows remote image dimensions check to be used to SSRF

PKSA-fvv8-yym2-vcvr CVE-2020-8226 GHSA-jhm9-h84h-rw83

Affected version: >=3.2.0,<3.2.10|>=3.3.0,<3.3.1

Reported by:
GitHub, FriendsOfPHP/security-advisories