Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

enhavo/enhavo-app

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
Packagist

Advisories 3

  • CVE-2024-25876Medium 6.1

    A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or…

    Affected: through 0.13.1.

  • CVE-2024-25875Medium 6.1

    A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or…

    Affected: through 0.13.1.

  • CVE-2024-25874Medium 5.4

    A cross-site scripting (XSS) vulnerability in the New/Edit Article module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web…

    Affected: through 0.13.1.