Tribulant Software

13 CVEs across 4 Tribulant Software products. Browse Tribulant Software vulnerabilities, severities, and proof-of-concept exploits.

Tribulant Software products with known CVEs

ProductCVEs
Newsletters10
Slideshow Gallery1
Snow Storm1
Tribulant Gallery Voting1
Tribulant Software CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57394High7.12026-07-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Re…
CVE-2026-57645High8.12026-06-26newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.
CVE-2026-54840High7.32026-06-26Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.
CVE-2025-67911Critical9.82026-01-08Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from…
CVE-2025-69020Medium6.52025-12-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows St…
CVE-2025-54034High7.52025-08-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Tribulant Software Newsletters newslet…
CVE-2025-54035Medium4.32025-07-16Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newslet…
CVE-2025-30858High7.12025-04-03Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Snow Storm snow-storm allows Reflected…
CVE-2025-30921High7.62025-03-27Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQ…
CVE-2025-26931High7.12025-02-25Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Tribulant Gallery Voting gallery-voting allows Stored XSS.This issue affects Tribulant Ga…
CVE-2025-24599High7.12025-02-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Re…
CVE-2024-47346High7.12024-10-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Re…
CVE-2024-47376Medium5.92024-10-05Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Slideshow Gallery slideshow-gallery al…