Known vulnerabilities in Kirby - page 3

Software: Kirby
Software CPE: cpe:2.3:a:iandstewart:kirby:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 65
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kirby Kirby is affected by 65 known vulnerabilities: 3 high, 21 medium, 41 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86806 - Unrestricted Upload of File with Dangerous Type
CVE-2024-26483
CWE-434 Medium
No
No
3.6.6.5, 3.7.5.4, 3.8.4.3, 3.9.8.1, 3.10.0.1, 4.1.1 26.02.2024 SB2024022647
#VU86805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27087
CWE-79 Low
No
No
4.1.1 26.02.2024 SB2024022647
#VU86804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-26481
CWE-79 Low
No
No
3.6.6.5, 3.7.5.4, 3.8.4.3, 3.9.8.1, 3.10.0.1, 4.1.1 26.02.2024 SB2024022647
#VU78722 - Improper Neutralization of Delimiters
CVE-2023-38488
CWE-140 Medium
No
No
3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 27.07.2023 SB2023072731
#VU78720 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-38490
CWE-611 Medium
Available
No
3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 27.07.2023 SB2023072731
#VU78719 - Allocation of Resources Without Limits or Throttling
CVE-2023-38492
CWE-770 Medium
No
No
3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 27.07.2023 SB2023072731
#VU78718 - Insufficient Session Expiration
CVE-2023-38489
CWE-613 Medium
No
No
3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 27.07.2023 SB2023072731
#VU78717 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38491
CWE-79 Low
No
No
3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, 3.9.6 27.07.2023 SB2023072731
#VU68419 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1 18.10.2022 SB2022101845
#VU68418 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1 18.10.2022 SB2022101845
#VU127187 - Observable Response Discrepancy
CVE-2022-39315
CWE-204 Medium
No
No
3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1 18.10.2022 SB2022101845
#VU127188 - Observable Response Discrepancy
CVE-2022-39314
CWE-204 Medium
No
No
3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1 18.10.2022 SB2022101845
#VU66763 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35174
CWE-79 Low
No
No
3.5.8.1, 3.6.6.1, 3.7.4 25.08.2022 SB2022082539
#VU66762 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36037
CWE-79 Low
No
No
3.5.8.1 25.08.2022 SB2022082539
#VU58234 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41258
CWE-79 Low
No
No
3.5.8 18.11.2021 SB2021111813
#VU58232 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41252
CWE-79 Low
No
No
3.5.8 18.11.2021 SB2021111813
#VU54529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
3.5.7 05.07.2021 SB2021070505
#VU126892 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2021-32735
CWE-80 Low
No
No
3.5.7 02.07.2021 SB2021070506
#VU54171 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3603
CWE-94 High
No
No
3.5.7 16.06.2021 SB2021061620
SB2021070506
SB2022032104
and 4 more
#VU54170 - Improper input validation
CVE-2021-34551
CWE-20 Medium
No
No
3.5.7 16.06.2021 SB2021061620
SB2021070506
SB2022032104
and 2 more


Showing elements 41 - 60 out of 65