Nukeviet vulnerabilities

Products

• Nukeviet 14
• Egovernment 2

Newest

• nukeviet NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class CVE-2026-41147 8.7 HighMay 15, 2026
• nukeviet Vinades NukeViet Module index.php server-side request forgery CVE-2025-8772 5.3 MediumAugust 9, 2025
• nukeviet, nukeviet egovernment +1 more nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code... CVE-2024-36531 5.7 MediumJune 10, 2024
• nukeviet, nukeviet egovernment +1 more nukeviet Deserialization of Untrusted Data vulnerability CVE-2024-36528 8.8 HighJune 10, 2024
• nukeviet cms, nukeviet +1 more NukeViet CMS Data URL Request.php filterAttr cross site scripting CVE-2022-3975 Fix available 3.5 LowNovember 13, 2022
• nukeviet Cross-site Scripting in NukeViet CMS CVE-2022-30874 Fix available 5.4 MediumJune 21, 2022
• nukeviet NukeViet SQL Injection vulnerability CVE-2020-21809 Fix available 9.8 CriticalJuly 29, 2021
• nukeviet NukeViet SQL Injection vulnerability via topicsid parameter CVE-2020-21808 Fix available 9.8 CriticalJuly 29, 2021
• nukeviet NukeViet Cross-site Scripting via the editor in the News module CVE-2020-22765 Fix available 6.1 MediumJuly 29, 2021
• nukeviet SQL Injection in NukeViet CVE-2019-7726 Fix available 9.8 CriticalDecember 31, 2020
• nukeviet Deserialization of Untrusted Data in NukeViet CVE-2019-7725 Fix available 9.8 CriticalDecember 31, 2020
• nukeviet NukeViet Cross-Site Request Forgery (CSRF) CVE-2020-13155 8.8 HighJune 23, 2020
• nukeviet NukeViet Cross-Site Request Forgery (CSRF) CVE-2020-13156 6.5 MediumJune 23, 2020
• nukeviet NukeViet Cross-Site Request Forgery (CSRF) CVE-2020-13157 6.5 MediumJune 23, 2020