Advisories · Technology
kleor Contact Manager.
Every CVE that names kleor Contact Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
- kleor Contact Manager
- Unrestricted file upload
- CVSS 7.1 High
WordPress Contact Manager plugin <= 9.1 - Reflected Cross Site Scripting (XSS) vulnerability
- Kleor Contact Manager
- Cross-site scripting (XSS)
- CVSS 8.8 High
WordPress Contact Manager plugin <= 9.1.1 - PHP Object Injection vulnerability
- Kleor Contact Manager
- Insecure deserialization
- CVSS 4.4 Medium
Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'
- kleor Contact Manager
- Cross-site scripting (XSS)
- CVSS 8.1 High
Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload
- kleor Contact Manager
- Unrestricted file upload