Xpressengine Xpressengine
4 CVEs affecting Xpressengine Xpressengine. Latest disclosed: 2023-02-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26642 | High | 8.8 | 2023-01-20 | When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient ve… |
CVE-2011-10003 | Medium | 5.5 | 2023-02-07 | A vulnerability was found in XpressEngine up to 1.4.4. It has been rated as critical. This issue affects some unknown processing of the component Update Query… |
CVE-2021-44912 | Medium | 5.4 | 2022-02-09 | In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files directory. Since .hta… |
CVE-2021-44911 | Medium | 5.4 | 2022-02-09 | XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading the Mouse over button and When selected b… |