Advisories · Technology

Site Reviews.

Every CVE that names Site Reviews among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-82925 CVE record

CVSS 8.1 High

Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature
- Site Reviews
- Insecure deserialization
Not analysed yet 10 Sept 2026
CVE-2025-1232 CVE record

CVSS 8.8 High

Site Reviews < 7.2.5 - Unauthenticated Stored XSS
- Site Reviews
Not analysed yet 19 Mar 2025
CVE-2024-3050 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Site Reviews < 7.0.0 - IP Spoofing
- Site Reviews
Not analysed yet 29 May 2024
CVE-2023-1525 CVE record

CVSS 4.8 Medium

Site Reviews < 6.7.1 - Admin+ Stored XSS
- Site Reviews
- Cross-site scripting (XSS)
Not analysed yet 2 May 2023
CVE-2021-24973 CVE record

Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting
- Site Reviews
- Cross-site scripting (XSS)
Not analysed yet 3 Jan 2022
CVE-2021-24603 CVE record

Site Reviews < 5.13.1 - Authenticated Stored XSS
- Site Reviews
- Cross-site scripting (XSS)
Not analysed yet 6 Sept 2021