Hortusfox
6 CVEs across 1 Hortusfox products. Browse Hortusfox vulnerabilities, severities, and proof-of-concept exploits.
Hortusfox products with known CVEs
Hortusfox CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-45313 | Medium | 6.1 | 2025-08-13 | A cross-site scripting (XSS) vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a us… |
CVE-2025-45317 | Medium | 6.5 | 2025-08-13 | A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive. |
CVE-2025-45316 | Medium | 6.1 | 2025-08-13 | A cross-site scripting (XSS) vulnerability in the TextBlockModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary web scripts or HTML… |
CVE-2025-45315 | Medium | 5.4 | 2025-08-13 | A cross-site scripting (XSS) vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the… |
CVE-2025-45314 | Medium | 6.1 | 2025-08-13 | A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a… |
CVE-2024-57329 | Medium | 5.4 | 2025-01-23 | HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attacker… |