Vulnerabilities in Hallo Welt! GmbH
18 resultsCVE-2022-2510MEDIUMPotential XSS on Special:SearchCenterEPSS 0.5%CVE-2022-2511MEDIUMPotential XSS in title URL parameterEPSS 0.5%CVE-2023-42431LOWPotential XSS on user preferences pageEPSS 0.4%CVE-2026-25784CRITICALbluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysopEPSS 0.3%CVE-2026-24732MEDIUMImproper permission checks in Extension:NSFileRepoEPSS 0.3%CVE-2022-3895MEDIUMPotential XSS in common user interface component libraryEPSS 0.3%CVE-2022-3893LOWPotential XSS on custom menu navigationEPSS 0.3%CVE-2022-41611LOWPotential XSS on sidebar navigationEPSS 0.3%CVE-2022-41789LOWPotential XSS on default page headerEPSS 0.3%CVE-2022-41814LOWPotential XSS in history viewEPSS 0.3%CVE-2022-42001LOWPotential XSS in book navigationEPSS 0.3%CVE-2022-3958LOWPotential XSS on personal menu navigationEPSS 0.3%CVE-2022-42000LOWPotential XSS in comment sectionEPSS 0.3%CVE-2025-46703MEDIUMPotential XSS in Extension:AtMentionsEPSS 0.2%CVE-2025-48007MEDIUMPotential XSS in Extension:BlueSpiceAvatarsEPSS 0.2%CVE-2026-25716HIGHBlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking usersEPSS 0.2%CVE-2025-57880MEDIUMPotential XSS in Extension:BlueSpiceWhoIsOnlineEPSS 0.2%CVE-2025-58114MEDIUMPotential XSS in Extension:CognitiveProcessDesignerEPSS 0.2%