# CVEs published 2025-04-20 25 CVEs were published on April 20, 2025: 0 critical, 0 high. Days are UTC. - [CVE-2025-3830](https://cve.now/CVE-2025-3830.md): kuangstudy KuangSimpleBBS QuestionController.java fileUpload unrestricted upload (CVSS 5.3, kuangstudy KuangSimpleBBS) - [CVE-2025-3829](https://cve.now/CVE-2025-3829.md): PHPGurukul Men Salon Management System sales-reports-detail.php sql injection (CVSS 6.9, PHPGurukul Men Salon Management System) - [CVE-2025-3828](https://cve.now/CVE-2025-3828.md): PHPGurukul Men Salon Management System view-appointment.php sql injection (CVSS 6.9, PHPGurukul Men Salon Management System) - [CVE-2025-3827](https://cve.now/CVE-2025-3827.md): PHPGurukul Men Salon Management System forgot-password.php sql injection (CVSS 6.9, PHPGurukul Men Salon Management System) - [CVE-2025-3826](https://cve.now/CVE-2025-3826.md): SourceCodester Web-based Pharmacy Product Management System add-supplier.php cross site scripting (CVSS 4.8, SourceCodester Web-based Pharmacy Product Management System) - [CVE-2025-3825](https://cve.now/CVE-2025-3825.md): SourceCodester Web-based Pharmacy Product Management System add-category.php cross site scripting (CVSS 4.8, SourceCodester Web-based Pharmacy Product Management System) - [CVE-2025-3824](https://cve.now/CVE-2025-3824.md): SourceCodester Web-based Pharmacy Product Management System add-product.php cross site scripting (CVSS 4.8, SourceCodester Web-based Pharmacy Product Management System) - [CVE-2025-3823](https://cve.now/CVE-2025-3823.md): SourceCodester Web-based Pharmacy Product Management System add-stock.php cross site scripting (CVSS 4.8, SourceCodester Web-based Pharmacy Product Management System) - [CVE-2025-3822](https://cve.now/CVE-2025-3822.md): SourceCodester Web-based Pharmacy Product Management System changepassword.php cross site scripting (CVSS 4.8, SourceCodester Web-based Pharmacy Product Management System) - [CVE-2025-3821](https://cve.now/CVE-2025-3821.md): SourceCodester Web-based Pharmacy Product Management System add-admin.php cross site scripting (CVSS 4.8, SourceCodester Web-based Pharmacy Product Management System) - [CVE-2020-36844](https://cve.now/CVE-2020-36844.md): The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. (CVSS 6.1, KnowBe4 Security Awareness Training) - [CVE-2020-36845](https://cve.now/CVE-2020-36845.md): The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination UR (CVSS 5.3, KnowBe4 Security Awareness Training) - [CVE-2025-43919](https://cve.now/CVE-2025-43919.md): GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at (CVSS 5.8, GNU Mailman) - [CVE-2025-43920](https://cve.now/CVE-2025-43920.md): GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute (CVSS 5.4, GNU Mailman) - [CVE-2025-43921](https://cve.now/CVE-2025-43921.md): GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. (CVSS 5.3, GNU Mailman) - [CVE-2025-43928](https://cve.now/CVE-2025-43928.md): In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal (CVSS 5.8, Infodraw Media Relay Service) - [CVE-2025-43929](https://cve.now/CVE-2025-43929.md): open\_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked f (CVSS 4.1, kitty project kitty) - [CVE-2025-43954](https://cve.now/CVE-2025-43954.md): QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set. (CVSS 4.9, Quasar QMarkdown ยท @quasar/quasar-ui-qmarkdown) - [CVE-2025-43955](https://cve.now/CVE-2025-43955.md): TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expression injection in (CVSS 2.2, Convertigo) - [CVE-2025-43961](https://cve.now/CVE-2025-43961.md): In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser. (CVSS 2.9, LibRaw) - [CVE-2025-43962](https://cve.now/CVE-2025-43962.md): In LibRaw before 0.21.4, phase\_one\_correct in decoders/load\_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w (CVSS 2.9, LibRaw) - [CVE-2025-43963](https://cve.now/CVE-2025-43963.md): In LibRaw before 0.21.4, phase\_one\_correct in decoders/load\_mfbacks.cpp allows out-of-buffer access because split\_col and split\_row values a (CVSS 2.9, LibRaw) - [CVE-2025-43964](https://cve.now/CVE-2025-43964.md): In LibRaw before 0.21.4, tag 0x412 processing in phase\_one\_correct in decoders/load\_mfbacks.cpp does not enforce minimum w0 and w1 values. (CVSS 2.9, LibRaw) - [CVE-2025-43966](https://cve.now/CVE-2025-43966.md): libheif before 1.19.6 has a NULL pointer dereference in ImageItem\_iden in image-items/iden.cc. (CVSS 2.9, struktur libheif) - [CVE-2025-43967](https://cve.now/CVE-2025-43967.md): libheif before 1.19.6 has a NULL pointer dereference in ImageItem\_Grid::get\_decoder in image-items/grid.cc because a grid image can referenc (CVSS 2.9, struktur libheif) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2025-04-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.