Crashfix Project Crashfix — known CVE vulnerabilities

Every CVE whose affected-product data names Crashfix Project Crashfix, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2018-20508 — CVSS 9.8 (critical): CrashFix 1.0.4 has SQL Injection via the User[status] parameter. This is related to actionIndex in UserController.php, and the…