Webgrind Project Webgrind — known CVE vulnerabilities

Every CVE whose affected-product data names Webgrind Project Webgrind, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-54339 — CVSS 9.8 (critical): Webgrind 1.1 contains a remote command execution vulnerability that allows unauthenticated attackers to inject OS commands via the dataFile…
• CVE-2018-12909 — CVSS 7.5 (high): Webgrind 1.5 relies on user input to display a file, which lets anyone view files from the local filesystem (that the webserver user has…
• CVE-2023-54341 — CVSS 6.1 (medium): Webgrind 1.1 and before contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious…
• CVE-2012-1790 — CVSS 5.0 (medium): Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the…