Opensource-Socialnetwork

6 CVEs across 2 Opensource-Socialnetwork products. Browse Opensource-Socialnetwork vulnerabilities, severities, and proof-of-concept exploits.

Opensource-Socialnetwork products with known CVEs

ProductCVEs
Open Source Social Network3
Opensource-Socialnetwork3
Opensource-Socialnetwork CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-108950Medium5.32026-10-12Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers…
CVE-2026-108164Medium6.52026-10-10Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows a…
CVE-2026-41309High8.22026-04-24Open Source Social Network (OSSN) is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An a…
CVE-2025-63585Medium6.52025-11-05OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.
CVE-2025-63441High7.32025-11-03Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.
CVE-2020-10560Medium5.92020-03-30An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any…