SIR
SIR Gnucommerce: vulnerabilidades y CVE
SIR Gnucommerce tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-30985 | Crítica (9.8) | 0.50% | — | 15 abr 2025 | Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through <= 1.5.4. |
| CVE-2025-26564 | Alta (7.1) | 0.37% | — | 26 mar 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through <= 1.5.4. |
| CVE-2017-18572 | Media (6.1) | 0.92% | — | 22 ago 2019 | The gnucommerce plugin before 1.4.2 for WordPress has XSS. |
| CVE-2016-10920 | Media (6.1) | 0.92% | — | 22 ago 2019 | The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS. |