Vulnerabilities
Products Security index
Vulnerabilities
CVE-2026-1466
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau
CVE-2025-7066
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau
CVE-2024-12326
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau
CVE-2022-30110
The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser.
CVE-2018-11349
The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
