Openenergymonitor Emoncms
6 CVEs affecting Openenergymonitor Emoncms. Latest disclosed: 2025-10-24. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-22992 | Critical | 9.8 | 2025-02-06 | A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9. The vulnerability is caused by improper handling of us… |
CVE-2025-60938 | High | 7.5 | 2025-10-24 | Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the ta… |
CVE-2025-60936 | Medium | 6.1 | 2025-10-24 | Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability allows authenticated attackers with API access to inject malicio… |
CVE-2021-26716 | Medium | 6.1 | 2021-02-21 | Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter. |
CVE-2017-5964 | Medium | 6.1 | 2017-02-12 | An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters… |
CVE-2019-1010008 | Medium | 5.4 | 2019-07-15 | OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting (XSS). The impact is: Theoretically low, but might potentially enable persistent X… |