Vulnerabilidades en Froxlor
77 resultadosCVE-2023-5564MEDIUMCross-site Scripting (XSS) - Stored in froxlor/froxlorEPSS 0.4%CVE-2026-54347HIGHFroxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account TakeoverEPSS 0.4%CVE-2026-41231HIGHFroxlor has Incomplete Symlink Validation in DataDump.add() that Allows Arbitrary Directory Ownership Takeover via CronEPSS 0.4%CVE-2026-113676MEDIUMFroxlor 0.10.0 before 2.3.15 Authorization Bypass via Admins.get APIEPSS 0.4%CVE-2022-4867LOWCross-Site Request Forgery (CSRF) in froxlor/froxlorEPSS 0.4%CVE-2026-41236HIGHFroxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` pathEPSS 0.4%CVE-2025-48958MEDIUMFroxlor has an HTML Injection VulnerabilityEPSS 0.4%CVE-2026-41230HIGHFroxlor has a BIND Zone File Injection via Unsanitized DNS Record Content in DomainZones::add()EPSS 0.3%CVE-2020-36978MEDIUMFroxlor Froxlor Server Management Panel 0.10.16 - Persistent Cross-Site ScriptingEPSS 0.3%CVE-2026-52793HIGHFroxlor: API Authentication bypasses 2FA AuthenticationEPSS 0.3%CVE-2023-1033MEDIUMCross-Site Request Forgery (CSRF) in froxlor/froxlorEPSS 0.3%CVE-2026-100711HIGHfroxlor before 2.3.12 Authentication Bypass via Session PersistenceEPSS 0.3%CVE-2026-90936MEDIUMFroxlor before 2.3.7 Information Disclosure via customer_email.phpEPSS 0.3%CVE-2026-100717HIGHfroxlor before 2.3.12 CRLF Injection via validateUrl userinfoEPSS 0.3%CVE-2026-90935MEDIUMFroxlor before 2.3.7 Authorization Bypass via Mysqls.add APIEPSS 0.3%CVE-2026-109960HIGHFroxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme ValueEPSS 0.3%CVE-2025-29773MEDIUMFroxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account TakeoverEPSS 0.3%CVE-2026-100709HIGHFroxlor before 2.3.11 2FA Bypass via Namespace ConfusionEPSS 0.3%CVE-2026-41234HIGHFroxlor: BIND Zone File Injection via TXT Record ContentEPSS 0.3%CVE-2026-41237HIGHFroxlor has an incomplete fix for CVE-2026-30932EPSS 0.3%