Skip to content
OpenAdvisories

Vendor

299ko

2 known vulnerabilities.

Products

CMS 1 299Ko 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-71249

    299Ko - Unauthenticated Reflected XSS in Public Contact Form

    299Ko's public contact form (plugin/contact/controllers/ContactController.php, home) sets raw POST field values (name, firstname, email, message) into the page template with no sanitization. The template engine's variable output function (common/Template.php,…

    299ko 299Ko
  • Medium 4.7
    CVE-2025-8265

    299Ko CMS File Management view unrestricted upload

    A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack r…

    299ko CMS