Vvveb Vvvebjs — known CVE vulnerabilities

Every CVE whose affected-product data names Vvveb Vvvebjs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-27480 — CVSS 9.8 (critical): givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
• CVE-2024-25182 — CVSS 9.8 (critical): givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
• CVE-2024-25181 — CVSS 9.1 (critical): A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary…
• CVE-2024-25183 — CVSS 7.5 (high): givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
• CVE-2024-29272 — CVSS 6.5 (medium): Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and…
• CVE-2024-29271 — CVSS 6.1 (medium): Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and…
• CVE-2025-8522 — CVSS 5.0 (medium): A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file…