Known vulnerabilities in Nextcloud Contacts

Vendor: Nextcloud
Software CPE: cpe:2.3:a:nextcloud:nextcloud_contacts:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nextcloud Contacts Nextcloud Contacts is affected by 6 known vulnerabilities: 1 high, 1 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119224 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-66554
CWE-79 Low
No
No
5.5.4, 6.0.6, 7.2.5 05.12.2025 SB2025120549
#VU57647 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-39221
CWE-79 Low
No
No
4.0.3 26.10.2021 SB2021102612
#VU48692 - Unrestricted Upload of File with Dangerous Type
CVE-2020-8281
CWE-434 Low
No
No
3.4.0 27.11.2020 SB2020102050
#VU48691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8280
CWE-79 Low
No
No
3.4.1 27.11.2020 SB2020112713
#VU48690 - Unrestricted Upload of File with Dangerous Type
CVE-2020-8181
CWE-434 High
No
No
3.3.0 10.07.2020 SB2020071024
#VU48693 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3764
CWE-79 Medium
No
No
2.1.2 05.07.2018 SB2018070512