Thm

7 CVEs across 2 Thm products. Browse Thm vulnerabilities, severities, and proof-of-concept exploits.

Thm products with known CVEs

ProductCVEs
Pilos5
Feedbacksystem2
Thm CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-22800Low2.42026-01-12PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery (CSRF) vulnerability exists…
CVE-2025-62781Medium5.02025-10-27PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.8.0, users with a local account can change their password whi…
CVE-2025-62524Medium5.32025-10-27PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PHP version via the X-Powered-By header…
CVE-2025-62523Medium6.32025-10-27PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 includes a Cross-Origin Resource Sharing (CORS) misco…
CVE-2023-47107High8.82023-11-08PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component deployed within PILOS uses the hostname…
CVE-2023-37468Medium6.02023-07-13Feedbacksystem is a personalized feedback system for students using artificial intelligence. Passwords of users using LDAP login are stored in clear text in th…
CVE-2023-27485Medium4.32023-03-07thmmniii/fbs-core is an open source feedback system for students. In versions prior to 1.5.3 when querying `subresults`, it is possible to query `subresults` f…