Skip to content
OpenAdvisories

Vendor

NamelessMC

20 known vulnerabilities.

Products

Nameless 18 namelessmc/nameless 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-54117

    NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor

    NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerability in NamelessMC before 2.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the dashboard text editor…

    NamelessMC Nameless
  • Critical 9.0
    CVE-2025-22144

    Account Takeover in NamelessMC

    NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can validate users and an attacker can reset their password. When the account is successfully approved by em…

    NamelessMC Nameless
  • Critical 9.8
    CVE-2022-2821

    Missing Critical Step in Authentication in namelessmc/nameless

    Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.

    NamelessMC namelessmc/nameless