Habitica

2 CVEs across 1 Habitica products. Browse Habitica vulnerabilities, severities, and proof-of-concept exploits.

Habitica products with known CVEs

ProductCVEs
Habitica5
Habitica CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-53274Medium6.12024-12-12Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `home…
CVE-2024-53273Medium6.12024-12-12Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `Regis…
CVE-2024-53272Medium6.12024-12-12Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `login` and `social media` fu…
CVE-2022-230782022-06-22In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.
CVE-2022-23077Medium6.12022-06-22In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.