Nasatheme

7 CVEs across 4 Nasatheme products. Browse Nasatheme vulnerabilities, severities, and proof-of-concept exploits.

Nasatheme products with known CVEs

ProductCVEs
Nasa Core4
Elessi2
Flozen1
Nasa Core1
Nasatheme CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-49070High7.52025-07-04Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows P…
CVE-2025-49873High7.12025-06-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Elessi elessi-theme allows Reflected XSS.This i…
CVE-2025-49071Critical10.02025-06-17Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flo…
CVE-2025-39508High7.12025-06-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Reflected XSS.This i…
CVE-2025-49067Medium6.52025-06-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Stored XSS.This issu…
CVE-2025-39506High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows P…
CVE-2025-39507High7.52025-05-16Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows P…