Lucidcrew

11 CVEs across 2 Lucidcrew products. Browse Lucidcrew vulnerabilities, severities, and proof-of-concept exploits.

Lucidcrew products with known CVEs

ProductCVEs
Pixie9
Wp Forum Server2
Lucidcrew CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-53306High7.62025-06-27Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in lucidcrew WP Forum Server forum-server allows SQL Inject…
CVE-2025-53305High7.12025-06-27Cross-Site Request Forgery (CSRF) vulnerability in lucidcrew WP Forum Server forum-server allows Stored XSS.This issue affects WP Forum Server: from n/a thro…
CVE-2017-7402Critical9.82017-04-03Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request…
CVE-2017-7363Medium6.12017-03-31Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.
CVE-2017-7362Medium6.12017-03-31Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.
CVE-2017-7361Medium6.12017-03-31Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.
CVE-2017-7360Medium6.12017-03-31Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.
CVE-2017-7359Medium6.12017-03-31Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.
CVE-2014-37862014-06-04Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitr…
CVE-2011-47102011-12-08Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pixie_user parameter…
CVE-2011-37932011-09-24Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message…