Gestsup

8 CVEs across 1 Gestsup products. Browse Gestsup vulnerabilities, severities, and proof-of-concept exploits.

Gestsup products with known CVEs

ProductCVEs
Gestsup8
Gestsup CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-22198Medium6.12026-01-09GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting (XSS) vulnerability in the API error logging functionality. By sendin…
CVE-2026-22197High8.12026-01-09GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionality. Multiple request parameters used to filter, se…
CVE-2026-22196High8.12026-01-09GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation…
CVE-2026-22195High8.12026-01-09GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality. User-controlled search input is incorporated into SQL q…
CVE-2026-22194High8.82026-01-09GestSup versions up to and including 3.2.60 contain a cross-site request forgery (CSRF) vulnerability where the application does not verify the authenticity of…
CVE-2023-52060Medium4.32024-02-13A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request.
CVE-2023-52059Medium5.42024-02-13A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…
CVE-2021-31646Critical9.82021-04-26Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote). The affected component is the file forgot_pwd.php - it uses…