Hubzilla

4 CVEs across 1 Hubzilla products. Browse Hubzilla vulnerabilities, severities, and proof-of-concept exploits.

Hubzilla products with known CVEs

ProductCVEs
Hubzilla4
Hubzilla CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-70556Medium4.32026-08-06Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::pos…
CVE-2022-27257High7.52022-04-15A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files vi…
CVE-2022-27258Medium6.12022-04-15Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath…
CVE-2022-27256Medium6.12022-04-13A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the s…