Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.7FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.May 7, 2026
- High7.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.May 7, 2026
- Medium5.4FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.May 7, 2026
- Critical9.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.May 7, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page.May 7, 2026
- Medium6.5A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php.May 7, 2026
- High8.8YesWiki is a wiki system written in PHP.May 7, 2026
- Medium5.4PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.May 6, 2026
- High7.2OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)May 4, 2026
- Medium5.7Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the editpage.php and the sanitizePageContent functionMay 4, 2026
- Low2.1A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0.May 4, 2026
- High8.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5.May 2, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the joinOn function in BuildHelper.php.May 1, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the data function in BuildHelper.php.May 1, 2026
- High8.4Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.May 1, 2026
- Medium6.1Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php componentApr 30, 2026
- Medium6.5SQL Injection vulnerability exists in Sourcecodester Online Job Portal phppdo 1.0 ivia the category parameter in /jobportal/index.php.EPSS 0.2%Apr 27, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameterApr 27, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameterApr 27, 2026
- Low2.0A vulnerability has been found in likeadmin-likeshop likeadmin_php up to 1.9.6.Apr 27, 2026
- High8.2Open Source Social Network (OSSN) is open-source social networking software developed in PHP.Apr 24, 2026
- Critical9.3Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads.Apr 23, 2026
- Critical9.1DDEV is an open-source tool for running local web development environments for PHP and Node.js.Apr 22, 2026
- High7.2Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.php.Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.EPSS 0.2%Apr 21, 2026