Skip to content
OpenAdvisories

Package · Packagist

funadmin/funadmin

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-2897

    funadmin Backend index.html cross site scripting

    A security vulnerability has been detected in funadmin up to 7.1.0-rc4. This vulnerability affects unknown code of the file app/backend/view/index/index.html of the component Backend Interface. The manipulation of the argument Value leads to cross site script…

    funadmin/funadmin Packagist
  • Low 3.7
    CVE-2026-2895

    funadmin Member.php repass password recovery

    A security flaw has been discovered in funadmin up to 7.1.0-rc4. Affected by this issue is the function repass of the file app/frontend/controller/Member.php. Performing a manipulation of the argument forget_code/vercode results in weak password recovery. Rem…

    funadmin/funadmin Packagist