CO
Vendor
Couchcms
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-47955 | CO CouchCMS CouchCMS | 5.4 | May 16 | CouchCMS 2.2.1 Cross-Site Scripting via SVG File Upload |
| CVE-2021-47958 | CO CouchCMS CouchCMS | 4.3 | May 15 | CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload |
| CVE-2026-29002 | CO CouchCMS CouchCMS | 7.2 | Apr 10 | CouchCMS Privilege Escalation via f_k_levels_list Parameter |
| CVE-2025-67004 | CO Couchcms Couchcms | 6.5 | Jan 9 | ** Disputed ** An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files via traversing directories back after back |
| CVE-2025-15005 | CO CouchCMS Couchcms | 3.7 | Dec 22 | CouchCMS reCAPTCHA config.example.php hard-coded key |
| CVE-2023-41609 | CO Couchcms Couchcms | 6.1 | Sep 11 | An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a crafted URL |
| CVE-2018-7662 | CO Couch Couchcms | 5.3 | Mar 4 | Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php |