Security
فارسی
All products

nukeviet/nukeviet

Composer · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request classCVE-2026-41147 · GHSA-64RR-PP78-62WW nukeviet/nukeviet Composer High No fix reported
NukeViet: Pre-authentication SSRF via X-Forwarded-HostCVE-2026-55372 · GHSA-4CHG-4752-W88R nukeviet/nukeviet Composer High Fix reported
NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment FunctionCVE-2026-54065 · GHSA-C9XG-64P9-F2JJ nukeviet/nukeviet Composer High Fix reported
NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News ModuleCVE-2026-54064 · GHSA-465G-4Q99-5X86 nukeviet/nukeviet Composer High Fix reported
NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2026-49259 · GHSA-W2W5-W2PW-R929 nukeviet/nukeviet Composer High Fix reported
NukeViet: Unauthenticated Reflected XSS in Comment ModuleCVE-2026-48118 · GHSA-MXPF-QGG6-V3FF nukeviet/nukeviet Composer High Fix reported
nukeviet Deserialization of Untrusted Data vulnerabilityCVE-2024-36528 · GHSA-MHJ4-VRCV-X4XC nukeviet/nukeviet Composer High No fix reported
NukeViet SQL Injection vulnerability via topicsid parameterCVE-2020-21808 · GHSA-84GF-RW24-PFQG nukeviet/nukeviet Composer Critical Fix reported
NukeViet SQL Injection vulnerabilityCVE-2020-21809 · GHSA-M8JX-MXF9-2RPW nukeviet/nukeviet Composer Critical Fix reported
NukeViet Cross-site Scripting via the editor in the News moduleCVE-2020-22765 · GHSA-6J4J-22QG-9FFM nukeviet/nukeviet Composer Medium Fix reported
NukeViet Cross-Site Request Forgery (CSRF)CVE-2020-13157 · GHSA-G3XF-85WC-45GQ nukeviet/nukeviet Composer Medium No fix reported
NukeViet Cross-Site Request Forgery (CSRF)CVE-2020-13156 · GHSA-C2PX-JCGW-9X57 nukeviet/nukeviet Composer Medium No fix reported
NukeViet Cross-Site Request Forgery (CSRF)CVE-2020-13155 · GHSA-7RW5-6PR4-FGH3 nukeviet/nukeviet Composer High No fix reported
NukeView CMS vulnerable to Cross-site ScriptingCVE-2022-3975 · GHSA-X45F-J34V-75XM nukeviet/nukeviet Composer Medium Fix reported
Cross-site Scripting in NukeViet CMSCVE-2022-30874 · GHSA-PM37-5J5M-6CVW nukeviet/nukeviet Composer Medium Fix reported
SQL Injection in NukeVietCVE-2019-7726 · GHSA-Q4QV-FMWC-QXPX nukeviet/nukeviet Composer Critical Fix reported
Deserialization of Untrusted Data in NukeVietCVE-2019-7725 · GHSA-32WR-8WXM-852C nukeviet/nukeviet Composer Critical Fix reported