Givanz vulnerabilities
57 CVEs and advisories name Givanz as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-41929Vvveb < 1.0.8.2 Unauthenticated Reflected XSS via Visual Editor
- CVE-2026-41938Vvveb < 1.0.8.2 RCE via Media Upload Handler
- CVE-2026-41930Vvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdmin
- CVE-2026-41931Vvveb < 1.0.8.2 Information Disclosure via Debug Exception Handler
- CVE-2026-41934Vvveb < 1.0.8.2 Authenticated RCE via Code Editor
- CVE-2026-41936Vvveb < 1.0.8.2 XML External Entity Injection via Import
- CVE-2026-39918Vvveb < 1.0.8.1 Code Injection via Installation Endpoint
- CVE-2026-34428Vvveb < 1.0.8.1 SSRF via oEmbedProxy
- CVE-2026-34427Vvveb < 1.0.8.1 Privilege Escalation via admin/user/save
- CVE-2026-34429Vvveb < 1.0.8.1 Stored XSS via Media Upload and Rename
- CVE-2026-5615givanz Vvvebjs File Upload Endpoint upload.php cross site scripting
- CVE-2025-12203givanz Vvveb Code Editor functions.php sanitizeFileName path traversal
- CVE-2025-11944givanz Vvveb Raw SQL import.php import sql injection
- CVE-2025-11029givanz Vvveb cross-site request forgery
- CVE-2025-11028givanz Vvveb Image information disclosure
- CVE-2025-11027givanz Vvveb SVG File cross site scripting
- CVE-2025-11026givanz Vvveb Configuration File information disclosure
- CVE-2025-9728givanz Vvveb login.tpl cross site scripting
- CVE-2025-9397givanz Vvveb media.php unrestricted upload
- CVE-2025-8976givanz Vvveb Endpoint post cross site scripting
- CVE-2025-8975givanz Vvveb edit.tpl cross site scripting
- CVE-2025-8522givanz Vvvebjs node.js save.php path traversal
- CVE-2025-8521givanz Vvveb Add Type post-types cross site scripting
- CVE-2025-8520givanz Vvveb Drag-and-Drop Editor editor server-side request forgery
- CVE-2025-8519givanz Vvveb Drag-and-Drop Editor editor information disclosure
- CVE-2025-8518givanz Vvveb Code Editor code.php save code injection
- CVE-2025-8517givanz Vvveb session fixiation