Weseek vulnerabilities

Products

• Growi 43
• Weseek/growi 2

Newest

• growi, inc. growi GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert... CVE-2025-54806 5.1 MediumOctober 23, 2025
• growi, inc. growi Stored cross-site scripting vulnerability exists in the presentation feature of GROWI versions... CVE-2023-42436 5.4 MediumDecember 26, 2023
• growi, inc. growi Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI... CVE-2023-50332 6.5 MediumDecember 26, 2023
• growi, inc. growi The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information... CVE-2023-50294 6.5 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the... CVE-2023-50175 5.4 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions... CVE-2023-49807 5.4 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6... CVE-2023-49779 5.4 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI... CVE-2023-49598 5.4 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0... CVE-2023-49119 5.4 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists... CVE-2023-47215 5.4 MediumDecember 26, 2023
• growi, inc. growi Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI... CVE-2023-46699 4.3 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability when processing profile images exists in GROWI versions... CVE-2023-45740 5.4 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the... CVE-2023-45737 5.4 MediumDecember 26, 2023
• growi, inc. growi Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of... CVE-2023-50339 5.4 MediumDecember 26, 2023
• weseek growi, weseek, inc. growi v5 series and v4 series +1 more Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to... CVE-2022-41799 6.5 MediumOctober 24, 2022
• weseek growi, weseek/growi +1 more Weak Password Requirements in weseek/growi CVE-2022-1236 4.3 MediumApril 5, 2022
• weseek growi, weseek/growi +1 more Authorization Bypass Through User-Controlled Key in weseek/growi CVE-2021-3852 6.3 MediumJanuary 12, 2022
• growi, inc. growi Cross-site scripting vulnerability due to the inadequate tag sanitization in GROWI versions v4.2... CVE-2021-20829 6.1 MediumSeptember 21, 2021
• growi, inc. growi Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker... CVE-2021-20737 6.5 MediumJune 22, 2021
• growi, inc. growi NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to... CVE-2021-20736 9.1 CriticalJune 22, 2021
• weseek growi, weseek, inc. growi (v4.2 series) +1 more Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2... CVE-2021-20673 4.8 MediumMarch 10, 2021
• weseek growi, weseek, inc. growi (v4.2 series) +1 more Reflected cross-site scripting vulnerability due to insufficient verification of URL query... CVE-2021-20672 6.1 MediumMarch 10, 2021
• growi, inc. growi Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker... CVE-2021-20671 7.2 HighMarch 10, 2021
• growi, inc. growi Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote... CVE-2021-20670 7.5 HighMarch 10, 2021
• growi, inc. growi Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with... CVE-2021-20669 4.7 MediumMarch 10, 2021
• growi, inc. growi Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with... CVE-2021-20668 2.7 LowMarch 10, 2021
• growi, inc. growi Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy)... CVE-2021-20667 5.4 MediumMarch 10, 2021
• weseek growi, weseek, inc. growi v4.2 series +1 more Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote... CVE-2021-20619 6.1 MediumJanuary 19, 2021
• growi, inc. growi Directory traversal vulnerability in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions... CVE-2020-5683 7.5 HighDecember 16, 2020
• growi, inc. growi Improper input validation in GROWI versions prior to v4.2.3 (v4.2 Series), GROWI versions prior... CVE-2020-5682 7.5 HighDecember 16, 2020
• growi, inc. growi Stored cross-site scripting vulnerability in GROWI v3.8.1 and earlier allows remote attackers to... CVE-2020-5678 6.1 MediumDecember 3, 2020
• growi, inc. growi Reflected cross-site scripting vulnerability in GROWI v4.0.0 and earlier allows remote attackers... CVE-2020-5677 6.1 MediumDecember 3, 2020
• growi, inc. growi GROWI v4.1.3 and earlier allow remote attackers to obtain information which is not allowed to... CVE-2020-5676 7.5 HighDecember 3, 2020
• weseek growi In WESEEK GROWI before 3.5.0, the site-wide basic authentication can be bypassed by adding a URL... CVE-2019-13337 7.5 HighJuly 9, 2019
• weseek growi In WESEEK GROWI before 3.5.0, a remote attacker can obtain the password hash of the creator of a... CVE-2019-13338 7.5 HighJuly 9, 2019
• growi, inc. growi Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users... CVE-2019-5969 6.1 MediumJuly 5, 2019
• growi, inc. growi Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote... CVE-2019-5968 8.8 HighJuly 5, 2019
• growi, inc. growi Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject... CVE-2018-16205 5.4 MediumJanuary 9, 2019
• growi, inc. growi Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject... CVE-2018-0698 5.4 MediumJanuary 9, 2019
• growi, inc. growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated... CVE-2018-0655 4.8 MediumSeptember 7, 2018
• growi, inc. growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to... CVE-2018-0654 6.1 MediumSeptember 7, 2018
• growi, inc. growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to... CVE-2018-0653 6.1 MediumSeptember 7, 2018
• growi, inc. growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated... CVE-2018-0652 4.8 MediumSeptember 7, 2018