Advisories · Technology

Relevanssi Premium.

Every CVE that names Relevanssi Premium among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103426 CVE record

CVSS 7.2 High

Relevanssi Premium <= 2.31.4 - Unauthenticated Stored Cross-Site Scripting via '_rt' Parameter
- Relevanssi Premium
- Cross-site scripting (XSS)
Not analysed yet 2 Oct 2026
CVE-2025-14719 CVE record

CVSS 4.9 Medium

Relevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLi
- Relevanssi
- Relevanssi Premium
Not analysed yet 7 Jan 2026
CVE-2025-5016 CVE record

CVSS 4.7 Medium

Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Cross-site scripting (XSS)
Not analysed yet 31 May 2025
CVE-2025-4396 CVE record

CVSS 7.5 High

Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- SQL injection
Not analysed yet 13 May 2025
CVE-2025-4054 CVE record

CVSS 6.1 Medium

Relevanssi <= 4.24.3 (Free) and <= 2.27.4 (Premium) - Unauthenticated Stored Cross-Site Scripting via Search Highlights
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Cross-site scripting (XSS)
Not analysed yet 7 May 2025
CVE-2024-7630 CVE record

CVSS 5.3 Medium

Relevanssi <= 4.22.2 (Free) and <= 2.25.1 (Premium) - Unauthenticated Information Exposure
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Information disclosure
Not analysed yet 16 Aug 2024
CVE-2024-3213 CVE record

CVSS 5.3 Medium

Relevanssi – A Better Search <= 4.22.1 - Missing Authorization to Unauthenticated Count Option Update
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Broken access control
Not analysed yet 9 Apr 2024
CVE-2024-3214 CVE record

CVSS 5.8 Medium

Relevanssi – A Better Search <= 4.22.1 - Unauthenticated Second Order CSV Injection
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Other injection
Not analysed yet 9 Apr 2024
CVE-2024-1380 CVE record

CVSS 5.3 Medium

Relevanssi – A Better Search <= 4.22.0 (Free) and <= 2.25.0 (Premium) - Missing Authorization to Unauthenticated Query Log Export
- Relevanssi Premium
- comesio Relevanssi – A Better Search
- Broken access control
Not analysed yet 13 Mar 2024
CVE-2023-7199 CVE record

CVSS 5.3 Medium

Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
- Relevanssi
- Relevanssi Premium
Not analysed yet 29 Jan 2024