Known vulnerabilities in Codoforum

Vendor: Codologic
Software: Codoforum
Software CPE: cpe:2.3:a:evnix:codoforum:*:*:*:*:*:*:*:*
Website: https://profiles.wordpress.org/evnix/
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Codoforum Codoforum is affected by 9 known vulnerabilities: 1 medium, 8 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-21845		 CWE-79 Low
No
No
 4.8.4 14.09.2020 SB2020092216
#VU25400 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7051		 CWE-79 Low
No
No
 - 17.02.2020 SB2020021711
#VU25399 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7050		 CWE-79 Low
No
No
 - 17.02.2020 SB2020021711
#VU25398 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9007		 CWE-79 Low
No
No
 - 17.02.2020 SB2020021710
#VU34899 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5842		 CWE-79 Low
Available
No
 - 07.01.2020 SB2020010617
#VU34900 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5843		 CWE-79 Low
No
No
 - 07.01.2020 SB2020010617
#VU34910 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5305		 CWE-79 Low
No
No
 - 06.01.2020 SB2020010617
#VU34911 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5306		 CWE-79 Low
No
No
 - 06.01.2020 SB2020010617
#VU40867 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-9261		 CWE-22 Medium
Available
No
 - 23.03.2015 SB2015032301