← Back

Hubzilla

hubzilla

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Hubzilla
hubzilla
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-27257
1Hubzilla
1Hubzilla
Jun 17, 2026
Apr 15, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.
CVE-2022-27258
1Hubzilla
1Hubzilla
Jun 17, 2026
Apr 15, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter.
CVE-2022-27256
1Hubzilla
1Hubzilla
Jun 17, 2026
Apr 13, 2022
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter.