elkarte

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

elkarte records in CISA KEV

No elkarte vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-38392 CVE-2024-58295 · GHSA-p578-g79h-p2x6

ElkArte Forum 1.1.9 Authenticated Remote Code Execution via Theme Upload

HIGH 72

ElkArte Forum 1.1.9 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the theme installation process.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00556 Published 2025-12-11 No fix listed CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0