Skip to content
OpenAdvisories

Vendor

Countly

7 known vulnerabilities.

Products

countly-server 7
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-44977

    countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context

    countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global application administrator to use uploadFeedbackFile to store attacker-controlled active content…

    Countly countly-server