Vulnerabilidades em choijun

12 resultados
Análise Vexday

A Choijun possui 12 vulnerabilidades registradas, com 1 classificada como crítica e nenhuma atualmente sob exploração ativa (KEV). A fraqueza predominante é XSS (CWE-79), indicando deficiências no tratamento de entrada em aplicações web, com apenas 1 CVE publicado nos últimos 90 dias, sugerindo um risco estabilizado mas que requer atenção aos controles de validação de dados.

CVE-2026-0920CRITICALLA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameterEPSS 1.1%CVE-2024-10873HIGHLA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File InclusionEPSS 1.1%CVE-2024-5349HIGHLA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File InclusionEPSS 1.0%CVE-2026-15338HIGHLA-Studio Element Kit for Elementor <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type' Widget SettingEPSS 0.5%CVE-2024-4431MEDIUMLA-Studio Element Kit for Elementor <= 1.3.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterEPSS 0.4%CVE-2025-3106MEDIUMLA-Studio Element Kit for Elementor <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table of Contents WidgetEPSS 0.4%CVE-2024-3005MEDIUMLA-Studio Element Kit for Elementor <= 1.3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via LaStudioKit Post Author WidgetEPSS 0.3%CVE-2024-2249MEDIUMLA-Studio Element Kit for Elementor <= 1.3.7.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-10787MEDIUMLA-Studio Element Kit for Elementor <= 1.4.4 - Authenticated (Contributor+) Post DisclosureEPSS 0.3%CVE-2025-4944MEDIUMLA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Compare and Google Maps WidgetsEPSS 0.2%CVE-2025-4943MEDIUMLA-Studio Element Kit for Elementor <= 1.5.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-lakit-element-link ParameterEPSS 0.2%CVE-2025-8360MEDIUMLA-Studio Element Kit for Elementor <= 1.5.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.2%