Vulnerabilities in GibbonEdu

5 results

CVE-2026-97864MEDIUMGibbonEdu Gibbon Unit Planner units_add_blockAjax.php makeBlock missing authenticationEPSS 0.6%CVE-2026-8208HIGHGibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directoEPSS 0.3%CVE-2026-8209MEDIUMGibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application EPSS 0.3%CVE-2026-8207HIGHGibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://githuEPSS 0.2%CVE-2025-26211LOWGibbon before 29.0.00 allows CSRF.EPSS 0.2%