← Back

Getkirby

getkirby

44 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Kirby
kirby
41 CVEs
Panel
panel
3 CVEs
Starterkit
starterkit
1 CVE
Webmentions
webmentions
1 CVE

CVEs (44)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-16630
1Getkirby
1Kirby
Nov 21, 2024
Dec 28, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file.
CVE-2018-16627
1Getkirby
1Kirby
Nov 21, 2024
Dec 20, 2018
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.
CVE-2018-16628
1Getkirby
1Kirby
Nov 21, 2024
Dec 4, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
panel/login in Kirby v2.5.12 allows XSS via a blog name.
CVE-2017-16807
1Getkirby
1Panel
May 13, 2026
Nov 13, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a specially prepared SVG document that has been uploaded as a content file.