Login Request a demo
CO
Product
Codeigniter
by Codeigniter · last CVE Jul 28, 2025
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 22High 8Medium 6Low 0
Severity
All severities41Critical22High8Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Codeigniter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6526
6.1
1%
Jul 5
CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting
Affected: before 1b3da45
CVE-2022-21715
6.1
1%
Jan 24
CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework
Affected: 4.0.0 before 4.1.8
CVE-2012-1915
6.1
2%
Jan 9
EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks
Affected: before 2.1.2
CVE-2013-4891
6.1
1%
Feb 21
The xss_clean function in CodeIgniter before 2.1.4 might allow remote attackers to bypass an intended protection mechanism and conduct cross-site scripting (XSS) attacks via an…
Affected: before 2.1.4
CVE-2025-24013
5.3
1%
Jan 20
CodeIgniter validation of header name and value
Affected: before 4.5.8
CVE-2022-39284
4.3
1%
Oct 6
Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4
Affected: 4.0.0 before 4.2.7
Showing 6