Ellislab Expressionengine — known CVE vulnerabilities

Every CVE whose affected-product data names Ellislab Expressionengine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2014-5387 — CVSS 6.5 (medium): Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL…