Advisories · Technology
cypht.
Every CVE that names cypht among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js
- cypht
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Cypht < 2.12.2 XSS via FROM Email Header in Contacts Module
- cypht
- Cross-site scripting (XSS)
- CVSS 8.7 High
Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter
- cypht
- Insecure deserialization