qriouslad vulnerabilities

CVEs per yearBy the year they were published

1. 20236
2. 20242
3. 20253
4. 20263

Newest CVEs

• CVE-2026-120114

  Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint

  qriouslad · Debug Log Manager – Conveniently Monitor and Inspect Errors

  High7.2
• CVE-2026-9016

  Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action

  qriouslad · Debug Log Manager – Conveniently Monitor and Inspect Errors

  Medium5.3
• CVE-2025-15487

  Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter

  qriouslad · Code Explorer

  Medium4.9
• CVE-2025-10377

  System Dashboard <= 2.8.20 - Cross-Site Request Forgery

  qriouslad · System Dashboard

  Medium4.3
• CVE-2025-3809

  Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting

  qriouslad · Debug Log Manager – Conveniently Monitor and Inspect Errors

  High7.2
• CVE-2024-12299

  System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter

  qriouslad · System Dashboard

  Medium6.1
• CVE-2024-10790

  Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG

  qriouslad · Admin and Site Enhancements (ASE)

  Medium5.4
• CVE-2023-5816

  Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading

  qriouslad · Code Explorer

  Medium4.9
• CVE-2023-5710

  System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)

  qriouslad · System Dashboard

  Medium4.3
• CVE-2023-5713

  System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)

  qriouslad · System Dashboard

  Medium4.3