Opencats Opencats vulnerabilities

• opencats OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional) CVE-2026-54453 7.2 HighOctober 28, 2026
• opencats OpenCATS: Authenticated SQL injection in activity DataGrid date filters CVE-2026-54455 7.6 HighOctober 28, 2026
• opencats OpenCATS before 0.12.0 Stored XSS via MRU Navigation Panel CVE-2026-115513 6.3 MediumOctober 22, 2026
• opencats OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent CVE-2026-113349 5.3 MediumOctober 20, 2026
• opencats OpenCATS before 0.10.0 Missing Authorization in Reports Module EEO Reports CVE-2026-112787 5.3 MediumOctober 20, 2026
• opencats OpenCATS before 0.10.0 Missing Authorization via Import Revert Action CVE-2026-112786 5.3 MediumOctober 20, 2026
• opencats OpenCATS before 0.10.0 Missing Authorization in Saved-List AJAX Endpoints CVE-2026-112785 5.3 MediumOctober 20, 2026
• opencats OpenCATS before 0.10.0 Missing Authorization via ajax/testEmailSettings.php CVE-2026-112784 5.3 MediumOctober 20, 2026
• opencats OpenCATS before 0.10.0 Missing Authorization via Activity AJAX Endpoints CVE-2026-112783 5.3 MediumOctober 20, 2026
• opencats OpenCATS Career Portal CareersUI.php processLogin excessive authentication CVE-2026-111874 6.3 MediumOctober 18, 2026
• opencats OpenCATS: Authenticated RCE in the Import module CVE-2026-54454 9.1 CriticalOctober 13, 2026
• opencats OpenCATS - SQL Injection in DataGrid Filter Handling for Tags Column CVE-2026-49490 8.6 HighMay 31, 2026
• opencats OpenCATS - SQL Injection in DataGrid sortDirection Parameter CVE-2026-49489 8.4 HighMay 31, 2026
• opencats OpenCATS 0.9.4 Remote Code Execution via Resume Upload CVE-2021-47936 9.3 CriticalMay 10, 2026
• opencats OpenCATS PHP Code Injection via installer AJAX endpoint CVE-2026-27760 Public exploit EPSS 33.0% 9.2 CriticalApril 28, 2026
• opencats A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute... CVE-2023-26847 5.4 MediumApril 11, 2023
• opencats A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute... CVE-2023-26846 5.4 MediumApril 11, 2023
• opencats A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into... CVE-2023-26845 4.3 MediumApril 11, 2023
• opencats Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST... CVE-2023-27295 5.4 MediumFebruary 28, 2023
• opencats Improper neutralization of input during web page generation allows an authenticated attacker with... CVE-2023-27294 5.4 MediumFebruary 28, 2023
• opencats Improper neutralization of input during web page generation allows an unauthenticated attacker to... CVE-2023-27293 EPSS 57.0% 6.1 MediumFebruary 28, 2023
• opencats An open redirect vulnerability exposes OpenCATS to template injection due to improper validation... CVE-2023-27292 5.4 MediumFebruary 28, 2023
• opencats Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in... CVE-2022-48013 5.4 MediumJanuary 27, 2023
• opencats Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-48012 6.1 MediumJanuary 27, 2023
• opencats Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID... CVE-2022-48011 9.8 CriticalJanuary 27, 2023
• opencats OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID... CVE-2022-43023 6.5 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable... CVE-2022-43022 6.5 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage... CVE-2022-43021 6.5 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable... CVE-2022-43020 6.5 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the... CVE-2022-43019 9.8 CriticalOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-43018 6.1 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-43017 6.1 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-43016 6.1 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-43015 6.1 MediumOctober 19, 2022
• opencats OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-43014 6.1 MediumOctober 19, 2022
• opencats OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an... CVE-2021-41560 Public exploit EPSS 11.3% 9.8 CriticalDecember 15, 2021
• opencats OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote... CVE-2021-25294 EPSS 11.3% 9.8 CriticalJanuary 18, 2021
• opencats OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues. CVE-2021-25295 6.1 MediumJanuary 18, 2021
• opencats lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files... CVE-2019-13358 Public exploit EPSS 24.3% 7.5 HighJuly 5, 2019