Filtered by vendor Beehiveforum Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-50910 2 Beehive Forum, Beehiveforum 2 Beehive Forum, Beehive Forum 2026-01-28 7.5 High
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.