humhub
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 23 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 6, 2015 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover
HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason
HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering
HumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmation
HumHub Missing Authorization on Remove All Space Members Action
HumHub: XSS in Button component
HumHub Calendar Module: Stored XSS in Event Types
HumHub is vulnerable to XSS through its Meta Search component
Files: Potential for SQL Injection through File Browse and List Operations
Files is Vulnerable to Reflected Self-XSS through its File Move Functionality
Monitor humhub in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.