Galette
10 CVEs across 1 Galette products. Browse Galette vulnerabilities, severities, and proof-of-concept exploits.
Galette products with known CVEs
Galette CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-58053 | Critical | 9.8 | 2025-12-19 | Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged… |
CVE-2025-58052 | High | 8.1 | 2025-12-19 | Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to version 1.2.0, attackers with group man… |
CVE-2025-53922 | Medium | 4.9 | 2025-12-19 | Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in… |
CVE-2025-48884 | Medium | 6.1 | 2025-11-04 | Galette is a membership management web application for non profit organizations. In versions 1.1.5.2 and below, Galette's Document Type is vulnerable to Cross-… |
CVE-2025-48076 | Medium | 5.4 | 2025-11-04 | Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS… |
CVE-2024-24761 | High | 7.5 | 2024-03-06 | Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per def… |
CVE-2021-41262 | High | 8.8 | 2021-12-16 | Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 are subject to SQL inje… |
CVE-2021-41261 | High | 8.1 | 2021-12-16 | Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 are subject to stored c… |
CVE-2021-41260 | High | 8.2 | 2021-12-16 | Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 do not check for Cross… |
CVE-2021-21319 | Medium | 6.8 | 2021-10-25 | Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored… |