Andondesign

7 CVEs across 2 Andondesign products. Browse Andondesign vulnerabilities, severities, and proof-of-concept exploits.

Andondesign products with known CVEs

ProductCVEs
Udesign Core4
Udesign3
Andondesign CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-28130High7.12026-03-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This is…
CVE-2025-63062High7.52025-12-09Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AndonDesign UDesign Core u-design-core…
CVE-2025-62051Medium6.52025-11-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core.This issue affects…
CVE-2025-53236Medium6.32025-10-22Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2025-53234High7.12025-10-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core allows Reflected X…
CVE-2025-24757Medium5.32025-07-04Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through <= 4.11.2.
CVE-2024-4077High7.12024-04-25Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affec…