Login Request a demo
IC
Product
Ips Community Suite
by Invisioncommunity · last CVE Jun 13, 2022
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 0
Severity
All severities4Critical1High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ips Community Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-40604
9.1
1%
Jun 13
A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via…
Affected: before 4.6.2
CVE-2021-32924
8.8
20%
Jun 1
Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\_builder::previewBlock method…
Affected: before 4.6.0
CVE-2021-3025
8.8
1%
Jan 8
Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in…
Affected: before 4.5.4.2
CVE-2021-3026
6.1
1%
Jan 5
Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment
Affected: before 4.5.4.2
Showing 4