CWE-82

8 CVEs classified under CWE-82. Newest first, with CVSS severity, EPSS score and public exploits for each.

Top CVEs for CWE-82
CVESeverityScorePublishedSummary
CVE-2024-52427Critical9.92024-11-18Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SS…
CVE-2024-52434Critical9.12024-11-18Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsyst…
CVE-2024-52393Critical9.12024-11-14Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress.This issue affects Podlove Po…
CVE-2024-49271Critical9.12024-10-16Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for…
CVE-2024-48042Critical9.12024-10-16Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Command Injection.This issue affects Co…
CVE-2025-53194High8.52025-08-20Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Code Injection.This issue affects JetEngine: from n/a through <= 3.7…
CVE-2023-30963Medium5.42023-07-10A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defe…
CVE-2026-567352026-09-25Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer (HtmlSanitizer::Strict) blocks external U…
All CVEs classified under CWE-82 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-567352026-09-25Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, zammad's HTML sanitizer (HtmlSanitizer::Strict) blocks external U…
CVE-2025-53194High8.52025-08-20Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Code Injection.This issue affects JetEngine: from n/a through <= 3.7…
CVE-2024-52434Critical9.12024-11-18Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsyst…
CVE-2024-52427Critical9.92024-11-18Deserialization of Untrusted Data vulnerability in Vollstart Event Tickets with Ticket Scanner event-tickets-with-ticket-scanner allows Server Side Include (SS…
CVE-2024-52393Critical9.12024-11-14Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress.This issue affects Podlove Po…
CVE-2024-49271Critical9.12024-10-16Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for…
CVE-2024-48042Critical9.12024-10-16Deserialization of Untrusted Data vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Command Injection.This issue affects Co…
CVE-2023-30963Medium5.42023-07-10A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defe…