Skip to content
OpenAdvisories

Vendor

thexerteproject

5 known vulnerabilities.

Products

xerteonlinetoolkits 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-117607

    Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import

    Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerability that allows authenticated users with system permission to run PHP by importing a crafted language pack. Attackers can upload a ZIP via import_language.php containing a .inc fi…

    thexerteproject xerteonlinetoolkits
  • High 8.6
    CVE-2026-34413 Public exploit Scanner template

    Xerte Online Toolkits Missing Authentication via connector.php

    Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where an HTTP redirect to unauthenticated callers does not call exit() or die(), allowing P…

    thexerteproject xerteonlinetoolkits
  • High 7.1
    CVE-2026-34414 Public exploit

    Xerte Online Toolkits Path Traversal via connector.php

    Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php where the name parameter in rename commands is not sanitized for path traversal sequences.…

    thexerteproject xerteonlinetoolkits