Diem-project vulnerabilities

Products

• Diem 13

Newest

• diem-project diem diem-project diem dmCodeEditor actions.class.php join path traversal CVE-2026-112138 5.1 MediumOctober 19, 2026
• diem-project diem diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting CVE-2026-112042 5.1 MediumOctober 19, 2026
• diem-project diem diem-project diem dmString.php random weak prng CVE-2026-112041 6.3 MediumOctober 19, 2026
• diem-project diem diem-project diem Sign-In BasedmUserActions.class.php redirect CVE-2026-112040 5.3 MediumOctober 19, 2026
• diem-project diem diem-project diem Administrative Console actions.class.php append cross site scripting CVE-2026-112039 4.8 MediumOctober 19, 2026
• diem-project diem diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting CVE-2026-112038 4.8 MediumOctober 19, 2026
• diem-project diem diem-project diem Google Analytics Client gapi.class.php certificate validation CVE-2026-112037 6.3 MediumOctober 19, 2026
• diem-project diem diem-project diem dmDataLoad.php default password CVE-2026-112030 5.3 MediumOctober 18, 2026
• diem-project diem diem-project diem SHA1 PluginDmUser.class.php weak password hash CVE-2026-112029 2.0 LowOctober 18, 2026
• diem-project diem diem-project diem dmWidget BasedmWidgetActions.class.php authorization CVE-2026-86183 6.9 MediumSeptember 6, 2026
• diem-project diem diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery CVE-2026-86182 5.3 MediumSeptember 6, 2026
• diem-project diem diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload CVE-2026-82679 5.3 MediumAugust 31, 2026
• diem-project diem diem-project diem Administrative Console actions.class.php executeCommand os command injection CVE-2026-82678 5.1 MediumAugust 31, 2026