Alex

8 CVEs across 5 Alex products. Browse Alex vulnerabilities, severities, and proof-of-concept exploits.

Alex products with known CVEs

ProductCVEs
Content Mask2
Downloadengine2
Featured Video Plus2
Include Fussball.de Widgets1
News-Engine1
Alex CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66637Medium6.52026-08-18Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.
CVE-2026-66685Medium5.32026-08-06Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.
CVE-2025-58012Low3.82025-09-22Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incorrectly Configured Access Control Securi…
CVE-2025-58011Medium6.42025-09-22Server-Side Request Forgery (SSRF) vulnerability in Alex Content Mask content-mask allows Server Side Request Forgery.This issue affects Content Mask: from n/a…
CVE-2024-47643Medium6.52024-10-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Include Fussball.de Widgets include-fussball-de-widg…
CVE-2006-54592006-10-23Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (…
CVE-2006-52912006-10-16PHP remote file inclusion vulnerability in admin/includes/spaw/spaw_control.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP…
CVE-2006-28792006-06-07SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid…