Hortusfox

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 10
    Known Exploited: 0
    0
    Critical Level Threats
    3
    High Level Threats
    7
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-108101

    HortusFox through 6.3 Unrestricted File Upload via Plant Attachments

    Last Modified: Oct 13, 2026
    Published: Oct 09, 2026

    CVE-2026-108100

    HortusFox before 6.2 SQL Injection via /api/locations/list include_info Parameter

    Last Modified: Oct 14, 2026
    Published: Oct 09, 2026

    CVE-2026-104069

    HortusFox < 6.2 Remote Code Execution via Theme Import

    Last Modified: Oct 27, 2026
    Published: Oct 06, 2026

    CVE-2026-92980

    HortusFox-Web < 6.1 Remote Code Execution via Import/Export

    Last Modified: Oct 01, 2026
    Published: Sep 17, 2026

    CVE-2025-45314

    A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the add function.

    Last Modified: Aug 18, 2025
    Published: Aug 13, 2025
    Items Per Page
    Hortusfox Vulnerabilities & Security CVEs | CVE-DB