civicrm

6 results · Clear filters · Feed

• Medium 6.1
  CVE-2025-65187

  A Stored Cross Site Scripting vulnerability exists in CiviCRM before v6.7 in the Accounting Batches field. An authentic…

  civicrm civicrm Debian Ubuntu
  Dec 2, 2025
• Medium 6.1
  CVE-2025-3573

  jquery-validation vulnerable to Cross-site Scripting

  Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a u…

  phpmyadmin phpmyadmin znuny znuny Debian Ubuntu npm
  Apr 15, 2025
• Medium 5.4
  CVE-2023-25440 Public exploit

  Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to ex…

  civicrm civicrm Debian Ubuntu
  May 23, 2023
• Medium 5.3
  CVE-2022-2400

  External Control of File Name or Path in dompdf/dompdf

  External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

  dompdf dompdf/dompdf dompdf/dompdf icingaweb2 Debian Ubuntu Packagist
  Jul 18, 2022
• Medium 5.9
  CVE-2021-43306

  Exponential ReDoS in jquery-validation

  An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

  jquery-validation jquery-validation civicrm jquery-validation Ubuntu npm
  Jun 1, 2022
• Medium 5.3
  CVE-2021-21252

  Regular expression denial of service in jquery-validation

  The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Exp…

  jquery-validation jquery-validation phpmyadmin phpmyadmin Debian Ubuntu npm NuGet
  Jan 13, 2021