Skip to content
Noroxi

dcatadmin records

6 published records for vendor dcatadmin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2025-65656
    39Monitor

    dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php.

    CriticalCVSS 9.8No exploitEPSS 0%

    dcatadmin · dcat adminDec 2, 2025

  • CVE-2024-29644
    24Monitor

    Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script

    MediumCVSS 6.1No exploitEPSS 1%

    dcatadmin · dcat adminMar 26, 2024

  • CVE-2023-33736
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a

    MediumCVSS 5.4No exploitEPSS 0%

    dcatadmin · dcat adminMay 31, 2023

  • CVE-2025-0709
    20Monitor

    Dcat-Admin Roles Page roles cross site scripting

    MediumCVSS 5.1No exploitEPSS 0%

    dcatadmin · dcat adminJan 24, 2025

  • CVE-2024-54774
    19Monitor

    Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create.

    MediumCVSS 4.8No exploitEPSS 0%

    dcatadmin · dcat adminDec 27, 2024

  • CVE-2024-54775
    19Monitor

    Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.

    MediumCVSS 4.8No exploitEPSS 0%

    dcatadmin · dcat adminDec 27, 2024