Exposure of BookStack

Documentation

21

exposure score

213

sites use

0

exploited

2

critical

CVEs

13 results

CVE-2020-5256HIGHRemote Code Execution Through Image Uploads in BookStackEPSS 2.0%CVE-2023-6199MEDIUMBook Stack v23.10.2 - LFR via Blind SSRFEPSS 1.4%CVE-2020-26210HIGHCross-Site Scripting in BookStackEPSS 1.2%CVE-2020-26211HIGHCross-Site Scripting in BookStackEPSS 1.1%CVE-2020-26260MEDIUMServer Side Request Forgery in BookStackEPSS 0.8%CVE-2020-11055MEDIUMCross-site Scripting in BookStackEPSS 0.8%CVE-2022-40690MEDIUMCross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scripEPSS 0.7%CVE-2026-82450HIGHBookStack before 26.05.4 Remote Code Execution via Book CoverEPSS 0.6%CVE-2026-5484MEDIUMBookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access controlEPSS 0.3%CVE-2026-89022CRITICALBookStack < 26.05.5 Authentication Bypass via Social Login Provider ConfusionEPSS 0.3%CVE-2026-84695CRITICALBookStack before 26.05.4 Stored XSS via Drawing UploadEPSS 0.3%CVE-2026-67204MEDIUMBookStack < 26.05.4 Broken Access Control via Image Gallery APIEPSS 0.2%CVE-2026-86285MEDIUMBookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access controlEPSS 0.2%