Browse CVEs

HIGH 8.1 CVE-2025-15398 A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAu… Badaso after 2.9.7 Fix from $1,9502025-12-31 CRITICAL 9.8 CVE-2025-52353 An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP … Badaso Mitigation only Fix from $2,3002025-08-26 MEDIUM 5.4 CVE-2023-38970 Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Nam… Badaso after 2.9.7 Fix from $1,6002023-08-30 MEDIUM 5.4 CVE-2023-38971 Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rac… Badaso after 2.9.7 Fix from $1,6002023-08-29 MEDIUM 5.4 CVE-2023-38969 Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter … Badaso No fix yet Fix from $1,6002023-08-28 MEDIUM 5.4 CVE-2023-38973 A stored cross-site scripting (XSS) vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML … Badaso Mitigation only Fix from $1,6002023-08-25 MEDIUM 5.4 CVE-2023-38974 A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or… Badaso No fix yet Fix from $1,6002023-08-25 CRITICAL 9.8 CVE-2022-41705 Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the applica… Badaso No fix yet Fix from $2,3002022-11-25 CRITICAL 9.8 CVE-2022-41711 Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the applica… Badaso No fix yet Fix from $2,3002022-10-25