Skip to content
OpenAdvisories

Package · Packagist

enhavo/enhavo-app

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-25874

    Enhavo Cross-site Scripting vulnerability

    A cross-site scripting (XSS) vulnerability in the New/Edit Article module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Create Tag text field.

    enhavo/enhavo-app Packagist
  • Medium 6.1
    CVE-2024-25875

    Enhavo Cross-site Scripting vulnerability

    A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Undertitle text field.

    enhavo/enhavo-app Packagist
  • Medium 6.1
    CVE-2024-25876

    Enhavo Cross-site Scripting vulnerability

    A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field.

    enhavo/enhavo-app Packagist