Vulnerabilities in givanz

51 results
Vexday analysis

A givanz possui 39 vulnerabilidades registradas, com preocupação elevada pelo volume recente: 18 CVEs publicadas nos últimos 90 dias, sinalizando ritmo de descobertas acelerado. Embora nenhuma esteja sob ataque ativo no momento e apenas 2 sejam críticas, a fraqueza dominante (CWE-79, injeção de scripts) indica padrão sistemático de falhas em validação de entrada, típico de controles de segurança deficientes no desenvolvimento.

CVE-2025-8517MEDIUMgivanz Vvveb session fixiationEPSS 2.1%CVE-2025-8518MEDIUMgivanz Vvveb Code Editor code.php save code injectionEPSS 2.0%CVE-2026-39918CRITICALVvveb < 1.0.8.1 Code Injection via Installation EndpointEPSS 1.1%CVE-2026-5615MEDIUMgivanz Vvvebjs File Upload Endpoint upload.php cross site scriptingEPSS 1.0%CVE-2026-41938HIGHVvveb < 1.0.8.2 RCE via Media Upload HandlerEPSS 1.0%CVE-2026-34427HIGHVvveb < 1.0.8.1 Privilege Escalation via admin/user/saveEPSS 1.0%CVE-2026-41934HIGHVvveb < 1.0.8.2 Authenticated RCE via Code EditorEPSS 1.0%CVE-2026-54612HIGHVvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-globalEPSS 0.8%CVE-2026-41930CRITICALVvveb < 1.0.8.2 Hard-coded Credentials Information Disclosure via phpMyAdminEPSS 0.6%CVE-2026-41937HIGHVvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin UploadEPSS 0.6%CVE-2025-11028MEDIUMgivanz Vvveb Image information disclosureEPSS 0.6%CVE-2025-11944MEDIUMgivanz Vvveb Raw SQL import.php import sql injectionEPSS 0.6%CVE-2026-49228HIGHVvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' productsEPSS 0.6%CVE-2026-49221HIGHVvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assetsEPSS 0.6%CVE-2025-9397MEDIUMgivanz Vvveb media.php unrestricted uploadEPSS 0.5%CVE-2026-41928MEDIUMVvveb < 1.0.8.2 Information Disclosure via Cron ControllerEPSS 0.5%CVE-2026-41936HIGHVvveb < 1.0.8.2 XML External Entity Injection via ImportEPSS 0.5%CVE-2026-49224HIGHVvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisionsEPSS 0.5%CVE-2026-34429MEDIUMVvveb < 1.0.8.1 Stored XSS via Media Upload and RenameEPSS 0.5%CVE-2026-49226HIGHVvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' postsEPSS 0.5%