Login Request a demo
LW
Product
Lollms Web UI
by Lollms · last CVE Mar 24, 2026
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities46In the news0Timeline
Severity mix
Critical 18High 18Medium 9Low 1
Severity
All severities46Critical18High18Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lollms Web UI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10019
6.7
1%
Mar 20
Path Traversal and OS Command Injection in parisneo/lollms-webui
Affected: 12
CVE-2024-8736
6.5
0%
Mar 20
Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
Affected: 12
CVE-2024-6673
6.5
0%
Oct 29
CSRF Vulnerability in parisneo/lollms-webui
Affected: before 10
CVE-2024-2299
6.1
0%
May 12
Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-1602
6.1
1%
Apr 10
Stored XSS leading to RCE in parisneo/lollms-webui
Affected: 9.0
CVE-2024-6986
5.4
0%
Mar 20
Cross-site Scripting (XSS) in parisneo/lollms-webui
Affected: 9.8
CVE-2024-5933
5.4
0%
Jun 27
Cross-site Scripting (XSS) in parisneo/lollms-webui
Affected: All versions, or not specified
CVE-2024-10047
5.3
1%
Mar 20
Directory Listing Vulnerability in parisneo/lollms-webui
Affected: 9.9
CVE-2024-7058
4.4
0%
Mar 20
Relative Path Traversal in parisneo/lollms-webui
Affected: 10
Showing 9