Browse CVEs

MEDIUM 6.1 CVE-2026-29048 HumHub is an Open Source Enterprise Social Network. In version 1.18.0, a cross-site scripting vulnerability was identified in the Button component of… Humhub Patch available Fix from $1,6002026-03-06 MEDIUM 6.1 CVE-2026-29052 The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled… Calendar 1.8.11+ Fix from $1,6002026-03-05 MEDIUM 6.1 CVE-2025-64442 HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious … Humhub 1.17.4+ Fix from $1,6002025-11-07 MEDIUM 6.5 CVE-2025-54790 Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploita… Files 0.16.10+ Fix from $1,6002025-08-02 MEDIUM 6.1 CVE-2025-54789 Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functionality does not contain logi… Files 0.16.10+ Fix from $1,6002025-08-02 MEDIUM 5.3 CVE-2024-52043 Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This iss… Humhub after 1.16.2 Fix from $1,6002024-11-06 CRITICAL 9.8 CVE-2017-20028 A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to … Humhub No fix yet Fix from $2,3002022-06-09 MEDIUM 6.1 CVE-2017-20026 A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The m… Humhub 1.1.1+ Fix from $1,6002022-06-09 MEDIUM 6.1 CVE-2017-20027 A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation… Humhub 1.1.1+ Fix from $1,6002022-06-09 MEDIUM 6.5 CVE-2022-24865 HumHub is an Open Source Enterprise Social Network. In affected versions users who are forced to change their password by an administrator may retrie… Humhub 1.9.4 / 1.10.4+ Fix from $1,6002022-04-20 MEDIUM 6.5 CVE-2021-43847 HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to bec… Humhub 1.9.3 / 1.10.3+ Fix from $1,6002021-12-20 MEDIUM 5.3 CVE-2019-12743 HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-ho… Social Network Kit Mitigation only Fix from $1,6002019-07-29 MEDIUM 6.1 CVE-2019-11564 A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/co… Humhub No fix yet Fix from $1,6002019-05-08 MEDIUM 6.1 CVE-2019-9093 A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input c… Humhub Mitigation only Fix from $1,6002019-03-21 MEDIUM 6.1 CVE-2019-9094 A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied i… Humhub Mitigation only Fix from $1,6002019-03-21 MEDIUM 5.4 CVE-2016-1229 Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta before 1.0.0-beta.3 allows remote authenticated users … Humhub Patch available Fix from $1,6002016-06-05 HIGH 7.5 CVE-2014-9528 SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListController.php in HumHub 0.10.0-rc.1 a… Humhub after 0.10.0 Fix from $1,9502015-01-06