Vulnerabilidades em melograno
10 resultadosAnálise Vexday
Melograno possui apenas 1 CVE registrada na base, relacionada a SQL Injection (CWE-89), publicada recentemente nos últimos 90 dias. Nenhuma vulnerabilidade está sob ataque ativo confirmado e não há críticas registradas, indicando perfil de risco baixo no momento.
CVE-2026-109384HIGHThe Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart UploadEPSS 0.7%CVE-2026-6286HIGHBooking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking SubmissionEPSS 0.6%CVE-2026-9055CRITICALBooking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'EPSS 0.5%CVE-2026-10148MEDIUMBooking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' ParameterEPSS 0.4%CVE-2026-14782MEDIUMBooking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer ImportEPSS 0.4%CVE-2026-16582MEDIUMBooking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment BypassEPSS 0.3%CVE-2026-103915MEDIUMBooking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' ParameterEPSS 0.3%CVE-2026-14311MEDIUMBooking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account TakeoverEPSS 0.2%CVE-2026-104992MEDIUMBooking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Authenticated (Custom+) Sensitive Information Disclosure via '/report/event/bookings' EndpointEPSS —CVE-2026-107616HIGHBooking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Unauthenticated Arbitrary Event Attendee Data Exposure via '/report/event/attendees' EndpointEPSS —