Browse CVEs

HIGH 8.8 CVE-2025-26211 Gibbon before 29.0.00 allows CSRF. Gibbon 29.0.00+ Fix from $1,9502025-05-27 MEDIUM 6.1 CVE-2024-34831 cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the libr… Gibbon No fix yet Fix from $1,6002024-09-10 CRITICAL 9.8 CVE-2024-24724EPSS 26% Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because i… Gibbon after 26.0.00 Fix from $2,3002024-04-03 HIGH 8.8 CVE-2024-24725EPSS 51% Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/Syst… Gibbon after 26.0.00 Fix from $1,9502024-03-23 CRITICAL 9.8 CVE-2023-45878EPSS 63% GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The e… Gibbon after 25.0.01 Fix from $2,3002023-11-14 HIGH 7.2 CVE-2023-45880 GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The… Gibbon after 25.0.00 Fix from $1,9502023-11-14 MEDIUM 6.1 CVE-2023-45881 GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks p… Gibbon after 25.0.00 Fix from $1,6002023-11-14 MEDIUM 5.4 CVE-2023-45879 GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component. Gibbon after 25.0.00 Fix from $1,6002023-11-14 CRITICAL 9.8 CVE-2023-34598EPSS 47% Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation … Gibbon No fix yet Fix from $2,3002023-06-29 MEDIUM 6.1 CVE-2023-34599 Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript co… Gibbon No fix yet Fix from $1,6002023-06-29 HIGH 8.8 CVE-2022-27305 Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation. Gibbon 23.0.02+ Fix from $1,9502022-05-25 MEDIUM 5.4 CVE-2022-23871 Multiple cross-site scripting (XSS) vulnerabilities in the component outcomes_addProcess.php of Gibbon CMS v22.0.01 allow attackers to execute arbitr… Gibbon No fix yet Fix from $1,6002022-02-03 MEDIUM 5.4 CVE-2021-40214 Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component. Gibbon Mitigation only Fix from $1,6002021-09-13 MEDIUM 6.1 CVE-2021-40492 A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gib… Gibbon Mitigation only Fix from $1,6002021-09-03