Vulnerabilities in qriouslad
13 resultsVexday analysis
Qriouslad apresenta 13 vulnerabilidades registradas sem nenhuma sob exploração ativa confirmada. A fraqueza dominante é de autorização inadequada (CWE-862), indicando problemas estruturais de controle de acesso, com apenas 1 CVE publicado nos últimos 90 dias sugerindo risco mais estável que emergente.
CVE-2023-5816MEDIUMCode Explorer <= 1.4.5 - Authenticated (Admin+) External File ReadingEPSS 0.5%CVE-2023-5713MEDIUMSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)EPSS 0.5%CVE-2023-5710MEDIUMSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)EPSS 0.5%CVE-2023-5711MEDIUMSystem Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)EPSS 0.4%CVE-2023-5714MEDIUMSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)EPSS 0.4%CVE-2023-5712MEDIUMSystem Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)EPSS 0.4%CVE-2025-15487MEDIUMCode Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' ParameterEPSS 0.4%CVE-2024-12299MEDIUMSystem Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename ParameterEPSS 0.4%CVE-2024-10790MEDIUMAdmin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVGEPSS 0.3%CVE-2025-3809HIGHDebug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-9016MEDIUMDebug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX ActionEPSS 0.3%CVE-2023-5772MEDIUMDebug Log Manager <= 2.2.0 - Cross-Site Request ForgeryEPSS 0.3%CVE-2025-10377MEDIUMSystem Dashboard <= 2.8.20 - Cross-Site Request ForgeryEPSS 0.2%