Kreaweb vulnerabilities

Products

• Genealogy 3

Newest

• kreaweb genealogy Genealogy is Missing Authorization in `TeamController::transferOwnership()` Allows Any Authenticated User to Hijack Any Team (Broken Access Control) CVE-2026-39355 10.0 CriticalApril 7, 2026
• kreaweb genealogy Genealogy has a Reflected XSS Vulnerability CVE-2025-55288 5.5 MediumAugust 18, 2025
• kreaweb genealogy Genealogy has a stored XSS vulnerability CVE-2025-55287 Public exploit 8.0 HighAugust 18, 2025