Gibbonedu vulnerabilities

Products

• Gibbon 20

Newest

• gibbonedu gibbon GibbonEdu Gibbon Unit Planner units_add_blockAjax.php makeBlock missing authentication CVE-2026-97864 6.9 MediumSeptember 25, 2026
• gibbonedu gibbon Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS... CVE-2026-8209 6.9 MediumMay 9, 2026
• gibbonedu gibbon Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in... CVE-2026-8208 8.9 HighMay 9, 2026
• gibbonedu gibbon Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by... CVE-2026-8207 7.0 HighMay 9, 2026
• gibbonedu gibbon Gibbon before 29.0.00 allows CSRF. CVE-2025-26211 3.7 LowMay 27, 2025
• gibbonedu gibbon, gibbon core +1 more Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a... CVE-2024-51337 3.5 LowNovember 21, 2024
• gibbon core, gibbonedu gibbon +1 more cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute... CVE-2024-34831 Public exploit 6.1 MediumSeptember 10, 2024
• gibbonedu gibbon Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template... CVE-2024-24724 Public exploit EPSS 26.1% 9.8 CriticalApril 3, 2024
• gibbonedu gibbon Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks... CVE-2024-24725 Public exploit EPSS 51.6% 8.8 HighMarch 23, 2024
• gibbonedu gibbon GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess... CVE-2023-45881 6.1 MediumNovember 14, 2023
• gibbonedu gibbon GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template... CVE-2023-45880 7.2 HighNovember 14, 2023
• gibbonedu gibbon GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager... CVE-2023-45879 5.4 MediumNovember 14, 2023
• gibbonedu gibbon GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because... CVE-2023-45878 Public exploit EPSS 63.4% 9.8 CriticalNovember 14, 2023
• gibbonedu gibbon Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which... CVE-2023-34599 Public exploit 6.1 MediumJune 29, 2023
• gibbonedu gibbon Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the... CVE-2023-34598 Public exploit EPSS 47.2% 9.8 CriticalJune 29, 2023
• gibbonedu gibbon Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation. CVE-2022-27305 8.8 HighMay 25, 2022
• gibbonedu gibbon Multiple cross-site scripting (XSS) vulnerabilities in the component outcomes_addProcess.php of... CVE-2022-23871 5.4 MediumFebruary 3, 2022
• gibbonedu gibbon Gibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability, that... CVE-2022-22868 4.8 MediumJanuary 28, 2022
• gibbonedu gibbon Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component. CVE-2021-40214 5.4 MediumSeptember 13, 2021
• gibbonedu gibbon A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application... CVE-2021-40492 Public exploit 6.1 MediumSeptember 3, 2021