Advisories · Technology
GutenKit.
Every CVE that names GutenKit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
GutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSS
- GutenKit
- Cross-site scripting (XSS)
- CVSS 3.5 Low
GutenKit < 2.5.1 - Contributor+ Stored CSS Injection
- GutenKit
- Other injection
- CVSS 2.7 Low
GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
- GutenKit
- Broken access control
- CVSS 6.8 Medium
GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
- GutenKit
- Cross-site scripting (XSS)