Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Badaso HIGH 8.1
CVE-2025-15398

A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAu…

Fix: after 2.9.7
Fix from $1,950 2025-12-31
Badaso CRITICAL 9.8
CVE-2025-52353

An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP …

Mitigation only
Fix from $2,300 2025-08-26
Badaso MEDIUM 5.4
CVE-2023-38970

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Nam…

Fix: after 2.9.7
Fix from $1,600 2023-08-30
Badaso MEDIUM 5.4
CVE-2023-38971

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rac…

Fix: after 2.9.7
Fix from $1,600 2023-08-29
Badaso MEDIUM 5.4
CVE-2023-38969

Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter …

No fix yet
Fix from $1,600 2023-08-28
Badaso MEDIUM 5.4
CVE-2023-38973

A stored cross-site scripting (XSS) vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML …

Mitigation only
Fix from $1,600 2023-08-25
Badaso MEDIUM 5.4
CVE-2023-38974

A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or…

No fix yet
Fix from $1,600 2023-08-25
Badaso CRITICAL 9.8
CVE-2022-41705

Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the applica…

No fix yet
Fix from $2,300 2022-11-25
Badaso CRITICAL 9.8
CVE-2022-41711

Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the applica…

No fix yet
Fix from $2,300 2022-10-25