Skip to content
OpenAdvisories

Vendor

toeverything

4 known vulnerabilities.

Products

AFFiNE 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2025-11945

    toeverything AFFiNE Avatar Upload Image Endpoint cross site scripting

    A vulnerability was identified in toeverything AFFiNE up to 0.24.1. This vulnerability affects unknown code of the component Avatar Upload Image Endpoint. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is pub…

    toeverything AFFiNE