Advisories · Technology

comesio Relevanssi – A Better Search.

Every CVE that names comesio Relevanssi – A Better Search among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116522 CVE record

CVSS 7.2 High

Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Late Entity Decode
- comesio Relevanssi – A Better Search
- Cross-site scripting (XSS)
Not analysed yet 31 Oct 2026
CVE-2026-97641 CVE record

CVSS 7.2 High

Relevanssi <= 4.28.3 - Unauthenticated Stored Cross-Site Scripting via Comment Content
- comesio Relevanssi – A Better Search
- Cross-site scripting (XSS)
Not analysed yet 2 Oct 2026
CVE-2026-19985 CVE record

CVSS 6.1 Medium

Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting
- comesio Relevanssi – A Better Search
- Cross-site scripting (XSS)
Not analysed yet 11 Sept 2026
CVE-2026-15941 CVE record

CVSS 6.5 Medium

Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contributor+) SQL Injection
- Relevanssi Premium – A Better Search
- comesio Relevanssi – A Better Search
- SQL injection
Not analysed yet 5 Aug 2026
CVE-2025-5016 CVE record

CVSS 4.7 Medium

Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Cross-site scripting (XSS)
Not analysed yet 31 May 2025
CVE-2025-4396 CVE record

CVSS 7.5 High

Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- SQL injection
Not analysed yet 13 May 2025
CVE-2025-4054 CVE record

CVSS 6.1 Medium

Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Cross-site scripting (XSS)
Not analysed yet 7 May 2025
CVE-2024-7630 CVE record

CVSS 5.3 Medium

Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Information disclosure
Not analysed yet 16 Aug 2024
CVE-2024-3213 CVE record

CVSS 5.3 Medium

Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Broken access control
Not analysed yet 9 Apr 2024
CVE-2024-3214 CVE record

CVSS 5.8 Medium

Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Other injection
Not analysed yet 9 Apr 2024
CVE-2024-1380 CVE record

CVSS 5.3 Medium

Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Broken access control
Not analysed yet 13 Mar 2024