Hotcrp vulnerabilities

Products

• Hotcrp 4

Newest

• hotcrp HotCRP vulnerable to stored XSS via comment attachments CVE-2026-25156 7.3 HighJanuary 30, 2026
• hotcrp HotCRP vulnerable to exposure of submitted documents CVE-2026-23878 6.5 MediumJanuary 19, 2026
• hotcrp HotCRP vulnerable to remote code execution through formulas CVE-2026-23836 10.0 CriticalJanuary 19, 2026
• hotcrp HotCRP cross site scripting CVE-2022-4819 2.4 LowDecember 28, 2022