Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Friendica MEDIUM 5.4
CVE-2024-39094

Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.

No fix yet
Fix from $1,600 2024-08-20
Friendica CRITICAL 9.8
CVE-2024-27730

Insecure Permissions vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information and execute arbitrary code via the…

Patch available
Fix from $2,300 2024-08-15
Friendica MEDIUM 6.1
CVE-2024-27728

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the text parameter of the babe…

Patch available
Fix from $1,600 2024-08-15
Friendica MEDIUM 6.1
CVE-2024-27729

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the location parameter of the …

Patch available
Fix from $1,600 2024-08-15
Friendica MEDIUM 6.1
CVE-2024-27731

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filterin…

Patch available
Fix from $1,600 2024-08-15
Friendica MEDIUM 6.1
CVE-2024-26495

Cross Site Scripting (XSS) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensiti…

Fix: 2024.03+
Fix from $1,600 2024-04-03
Friendica HIGH 7.5
CVE-2021-30141

Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted…

Fix: after 2021.01
Fix from $1,950 2021-04-05