Login Request a demo
OP
Vendor
opencats
1 product with CVEs on record
39
CVEs
0
On KEV
11
New 30D
Products
OP
OpenCATS
opencats
9.8
39 CVEs0 on KEV11 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-54453
New
OP
OpenCATS
opencats
7.2–Oct 28OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
CVE-2026-54455
New
OP
OpenCATS
opencats
7.6–Oct 28OpenCATS: Authenticated SQL injection in activity DataGrid date filters
CVE-2026-115513
New
OP
OpenCATS
opencats
8.7
0%
Oct 22OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel
CVE-2026-113349
OP
OpenCATS
opencats
4.3
0%
Oct 20OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent
CVE-2026-112787
OP
OpenCATS
opencats
4.3
0%
Oct 20OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports
CVE-2026-112786
OP
OpenCATS
opencats
5.4
0%
Oct 20OpenCATS before 0.10.0 Missing Authorization via Import Revert Action
CVE-2026-112785
OP
OpenCATS
opencats
4.3
0%
Oct 20OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints
CVE-2026-112784
OP
OpenCATS
opencats
4.3
0%
Oct 20OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php
CVE-2026-112783
OP
OpenCATS
opencats
4.3
0%
Oct 20OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints
CVE-2026-111874
OP
OpenCATS
Opencats
3.7
0%
Oct 18OpenCATS Career Portal CareersUI.php processLogin excessive authentication
CVE-2026-54454
OP
OpenCATS
opencats
9.1
0%
Oct 13OpenCATS: Authenticated RCE in the Import module
CVE-2026-49490
OP
OpenCATS
OpenCATS
8.1
0%
May 31OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column
CVE-2026-49489
OP
OpenCATS
OpenCATS
8.5
0%
May 31OpenCATS - SQL Injection in DataGrid sortDirection Parameter
CVE-2021-47936
OP
OpenCATS
Opencats
9.8
1%
May 10OpenCATS 0.9.4 Remote Code Execution via Resume Upload
CVE-2026-27760
OP
OpenCATS
opencats
8.1
33%
Apr 28OpenCATS PHP Code Injection via installer AJAX endpoint
CVE-2023-26847
OP
Opencats
Opencats
5.4
0%
Apr 11A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state…
CVE-2023-26846
OP
Opencats
Opencats
5.4
0%
Apr 11A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city…
CVE-2023-26845
OP
Opencats
Opencats
4.3
0%
Apr 11A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors
CVE-2023-27295
OP
Opencats
Opencats
5.4
0%
Feb 28Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests
CVE-2023-27294
OP
Opencats
Opencats
5.4
1%
Feb 28Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted account to submit malicious Javascript as the description…
CVE-2023-27293
OP
Opencats
Opencats
6.1
57%
Feb 28Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the answer to a questionnaire which would then be…
CVE-2023-27292
OP
Opencats
Opencats
5.4
1%
Feb 28An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters
CVE-2022-48013
OP
Opencats
Opencats
5.4
1%
Jan 27Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/index.php?m=calendar
CVE-2022-48012
OP
Opencats
Opencats
6.1
1%
Jan 27Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /opencats/index.php?m=settings&a=ajax_tags_upd
CVE-2022-48011
OP
Opencats
Opencats
9.8
1%
Jan 27Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function
CVE-2022-43020
OP
Opencats
Opencats
6.5
1%
Oct 19OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag update function
CVE-2022-43019
OP
Opencats
Opencats
9.8
3%
Oct 19OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax functionality
CVE-2022-43018
OP
Opencats
Opencats
6.1
2%
Oct 19OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter in the Check Email function
CVE-2022-43017
OP
Opencats
Opencats
6.1
2%
Oct 19OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile component
CVE-2022-43016
OP
Opencats
Opencats
6.1
2%
Oct 19OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback component
CVE-2022-43014
OP
Opencats
Opencats
6.1
2%
Oct 19OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter
CVE-2022-43015
OP
Opencats
Opencats
6.1
2%
Oct 19OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage parameter
CVE-2022-43023
OP
Opencats
Opencats
6.5
1%
Oct 19OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function
CVE-2022-43022
OP
Opencats
Opencats
6.5
1%
Oct 19OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag deletion function
CVE-2022-43021
OP
Opencats
Opencats
6.5
1%
Oct 19OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable
CVE-2021-41560
OP
Opencats
Opencats
9.8
11%
Dec 15OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php
CVE-2021-25295
OP
Opencats
Opencats
6.1
2%
Jan 18OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues
CVE-2021-25294
OP
Opencats
Opencats
9.8
11%
Jan 18OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution
CVE-2019-13358
OP
Opencats
Opencats
7.5
24%
Jul 5lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system