Login Request a demo
XO
Product
Xoops
by Xoops · last CVE Aug 3, 2023
43
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities43In the news0Timeline
Severity mix
Critical 2High 1Medium 5Low 0
Severity
All severities43Critical2High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Xoops to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-12139
6.1
1%
Aug 2
XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php
Affected: 2.5.8
CVE-2017-12138
6.1
3%
Aug 2
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter
Affected: 2.5.8
CVE-2017-7944
6.1
1%
Apr 24
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php
Affected: 2.5.8.1
CVE-2019-16684
4.8
1%
Sep 30
An issue was discovered in the image-manager in Xoops 2.5.10
Affected: 2.5.10
CVE-2019-16683
4.8
1%
Sep 30
An issue was discovered in the image-manager in Xoops 2.5.10
Affected: 2.5.10
Showing 5