Skip to content
OpenAdvisories

Vendor

openreplay

8 known vulnerabilities.

Products

openreplay 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-55879

    OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover

    OpenReplay is a self-hosted session replay suite. From 1.24.0 before 1.25.0, the OpenReplay tracking SDK accepts custom event names and captured page URLs from any visitor using a public project key, stores them in ClickHouse without output encoding, and late…

    openreplay openreplay