Login Request a demo
PH
Product
Phlox
by averta · last CVE Jan 6, 2026
2
CVEs
0
On KEV
6.4
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Phlox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-4776
6.4
0%
Jan 6
Phlox <= 2.17.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-caption` HTML Attribute
Affected: through 2.17.7
CVE-2024-6339
6.1
0%
Aug 21
Phlox PRO <= 5.16.4 - Reflected Cross-Site Scripting via Search Parameters
Affected: before 5.16.5
Showing 2