Skip to contentGibbonedu Gibbon vulnerabilities
- gibbonedu gibbonGibbonEdu Gibbon Unit Planner units_add_blockAjax.php makeBlock missing authenticationCVE-2026-978646.9 Medium
- gibbonedu gibbonGibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS...CVE-2026-82096.9 Medium
- gibbonedu gibbonGibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in...CVE-2026-82088.9 High
- gibbonedu gibbonGibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by...CVE-2026-82077.0 High
- gibbonedu gibbonGibbon before 29.0.00 allows CSRF.CVE-2025-262113.7 Low
- gibbonedu gibbon, gibbon core +1 moreCross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a...CVE-2024-513373.5 Low
- gibbon core, gibbonedu gibbon +1 morecross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute...CVE-2024-34831Public exploit6.1 Medium
- gibbonedu gibbonGibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template...CVE-2024-24724Public exploitEPSS 26.1%9.8 Critical
- gibbonedu gibbonGibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks...CVE-2024-24725Public exploitEPSS 51.6%8.8 High
- gibbonedu gibbonGibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess...CVE-2023-458816.1 Medium
- gibbonedu gibbonGibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template...CVE-2023-458807.2 High
- gibbonedu gibbonGibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager...CVE-2023-458795.4 Medium
- gibbonedu gibbonGibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because...CVE-2023-45878Public exploitEPSS 63.4%9.8 Critical
- gibbonedu gibbonMultiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which...CVE-2023-34599Public exploit6.1 Medium
- gibbonedu gibbonGibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the...CVE-2023-34598Public exploitEPSS 47.2%9.8 Critical
- gibbonedu gibbonGibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.CVE-2022-273058.8 High
- gibbonedu gibbonMultiple cross-site scripting (XSS) vulnerabilities in the component outcomes_addProcess.php of...CVE-2022-238715.4 Medium
- gibbonedu gibbonGibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability, that...CVE-2022-228684.8 Medium
- gibbonedu gibbonGibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.CVE-2021-402145.4 Medium
- gibbonedu gibbonA reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application...CVE-2021-40492Public exploit6.1 Medium