OP
Product
OpenCATS
39
CVEs
0
On KEV
9.8
Max CVSS
11
New 30D
Severity mix
Critical 6High 7Medium 25Low 1
Watch
Add OpenCATS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-43023 | 6.5 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function Affected: 0.9.6 |
| CVE-2022-43021 | 6.5 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable Affected: 0.9.6 |
| CVE-2022-43020 | 6.5 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag update function Affected: 0.9.6 |
| CVE-2022-43022 | 6.5 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag deletion function Affected: 0.9.6 |
| CVE-2023-27293 | 6.1 | Feb 28 | Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javascript as the answer to a questionnaire which would then be… Affected: 0.9.6 |
| CVE-2022-48012 | 6.1 | Jan 27 | Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /opencats/index.php?m=settings&a=ajax_tags_upd Affected: 0.9.7 |
| CVE-2022-43018 | 6.1 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter in the Check Email function Affected: 0.9.6 |
| CVE-2022-43017 | 6.1 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile component Affected: 0.9.6 |
| CVE-2022-43016 | 6.1 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback component Affected: 0.9.6 |
| CVE-2022-43015 | 6.1 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage parameter Affected: 0.9.6 |
| CVE-2022-43014 | 6.1 | Oct 19 | OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter Affected: 0.9.6 |
| CVE-2021-25295 | 6.1 | Jan 18 | OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues Affected: through 0.9.5-3 |
| CVE-2026-112786 | 5.4 | Oct 20 | OpenCATS before 0.10.0 Missing Authorization via Import Revert Action Affected: before 0.10.0 |
| CVE-2023-26847 | 5.4 | Apr 11 | A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state… Affected: 0.9.7 |
| CVE-2023-26846 | 5.4 | Apr 11 | A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city… Affected: 0.9.7 |
| CVE-2023-27295 | 5.4 | Feb 28 | Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests Affected: 0.9.6 |
| CVE-2023-27294 | 5.4 | Feb 28 | Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted account to submit malicious Javascript as the description… Affected: 0.9.6 |
| CVE-2023-27292 | 5.4 | Feb 28 | An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters Affected: 0.9.6 |
| CVE-2022-48013 | 5.4 | Jan 27 | Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/index.php?m=calendar Affected: 0.9.7 |
| CVE-2026-113349 | 4.3 | Oct 20 | OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent Affected: before 0.10.0 |
| CVE-2026-112787 | 4.3 | Oct 20 | OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports Affected: before 0.10.0 |
| CVE-2026-112785 | 4.3 | Oct 20 | OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints Affected: before 0.10.0 |
| CVE-2026-112784 | 4.3 | Oct 20 | OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php Affected: before 0.10.0 |
| CVE-2026-112783 | 4.3 | Oct 20 | OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints Affected: before 0.10.0 |
| CVE-2023-26845 | 4.3 | Apr 11 | A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors Affected: 0.9.7 |
Showing 25