pybbs project records
16 published records for vendor pybbs project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-521 Weak Password Requirements1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
16 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
30Monitor | CVE-2020-28702No exploit | A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.pybbs project · pybbs · CWE-89 | High7.5 | 1.0%Nov 1, 2021 |
24Monitor | CVE-2022-23391No exploit | A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inspybbs project · pybbs · CWE-79 | Medium6.1 | 0.6%Feb 14, 2022 |
22Monitor | CVE-2025-8546No exploit | atjiu pybbs Verification Code login Captchapybbs project · pybbs · CWE-287 | Medium5.5 | 0.5%Aug 5, 2025 |
22Monitor | CVE-2025-8547No exploit | atjiu pybbs Email Verification improper authorizationpybbs project · pybbs · CWE-266 | Medium5.5 | 0.4%Aug 5, 2025 |
11Monitor | CVE-2025-8548No exploit | atjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposurepybbs project · pybbs · CWE-200 | Low2.9 | 0.5%Aug 5, 2025 |
11Monitor | CVE-2025-8549No exploit | atjiu pybbs UserAdminController.java update weak passwordpybbs project · pybbs · CWE-521 | Low2.9 | 0.5%Aug 5, 2025 |
8Monitor | CVE-2025-8814No exploit | atjiu pybbs CookieUtil.java setCookie cross-site request forgerypybbs project · pybbs · CWE-352 | Low2.1 | 0.4%Aug 10, 2025 |
8Monitor | CVE-2025-8555No exploit | atjiu pybbs search cross site scriptingpybbs project · pybbs · CWE-79 | Low2.0 | 0.3%Aug 5, 2025 |
8Monitor | CVE-2025-12297No exploit | atjiu pybbs UserApiController.java information disclosurepybbs project · pybbs · CWE-200 | Low2.1 | 0.3%Oct 27, 2025 |
8Monitor | CVE-2025-8813No exploit | atjiu pybbs IndexController.java changeLanguage redirectpybbs project · pybbs · CWE-601 | Low2.0 | 0.3%Aug 10, 2025 |
8Monitor | CVE-2025-8551No exploit | atjiu pybbs list cross site scriptingpybbs project · pybbs · CWE-79 | Low2.0 | 0.3%Aug 5, 2025 |
7Monitor | CVE-2025-8550Proof of concept | atjiu pybbs list cross site scriptingpybbs project · pybbs · CWE-79 | Low1.9 | 0.7%Aug 5, 2025 |
7Monitor | CVE-2025-8812No exploit | atjiu pybbs Admin Panel settings cross site scriptingpybbs project · pybbs · CWE-79 | Low1.9 | 0.3%Aug 10, 2025 |
7Monitor | CVE-2025-8553No exploit | atjiu pybbs list cross site scriptingpybbs project · pybbs · CWE-79 | Low1.9 | 0.3%Aug 5, 2025 |
7Monitor | CVE-2025-8554No exploit | atjiu pybbs list cross site scriptingpybbs project · pybbs · CWE-79 | Low1.9 | 0.3%Aug 5, 2025 |
7Monitor | CVE-2025-8552No exploit | atjiu pybbs list cross site scriptingpybbs project · pybbs · CWE-79 | Low1.9 | 0.3%Aug 5, 2025 |
- CVE-2020-2870230Monitor
A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.
HighCVSS 7.5No exploitEPSS 1%pybbs project · pybbsNov 1, 2021
- CVE-2022-2339124Monitor
A cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload ins
MediumCVSS 6.1No exploitEPSS 0%pybbs project · pybbsFeb 14, 2022
- CVE-2025-854622Monitor
atjiu pybbs Verification Code login Captcha
MediumCVSS 5.5No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-854722Monitor
atjiu pybbs Email Verification improper authorization
MediumCVSS 5.5No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-854811Monitor
atjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposure
LowCVSS 2.9No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-854911Monitor
atjiu pybbs UserAdminController.java update weak password
LowCVSS 2.9No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-88148Monitor
atjiu pybbs CookieUtil.java setCookie cross-site request forgery
LowCVSS 2.1No exploitEPSS 0%pybbs project · pybbsAug 10, 2025
- CVE-2025-85558Monitor
atjiu pybbs search cross site scripting
LowCVSS 2.0No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-122978Monitor
atjiu pybbs UserApiController.java information disclosure
LowCVSS 2.1No exploitEPSS 0%pybbs project · pybbsOct 27, 2025
- CVE-2025-88138Monitor
atjiu pybbs IndexController.java changeLanguage redirect
LowCVSS 2.0No exploitEPSS 0%pybbs project · pybbsAug 10, 2025
- CVE-2025-85518Monitor
atjiu pybbs list cross site scripting
LowCVSS 2.0No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-85507Monitor
atjiu pybbs list cross site scripting
LowCVSS 1.9Proof of conceptEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-88127Monitor
atjiu pybbs Admin Panel settings cross site scripting
LowCVSS 1.9No exploitEPSS 0%pybbs project · pybbsAug 10, 2025
- CVE-2025-85537Monitor
atjiu pybbs list cross site scripting
LowCVSS 1.9No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-85547Monitor
atjiu pybbs list cross site scripting
LowCVSS 1.9No exploitEPSS 0%pybbs project · pybbsAug 5, 2025
- CVE-2025-85527Monitor
atjiu pybbs list cross site scripting
LowCVSS 1.9No exploitEPSS 0%pybbs project · pybbsAug 5, 2025