Read the docs

galette

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

galette records in CISA KEV

No galette vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Galette 10 records HIGH

Records

10 records

TI-2021-18094 CVE-2021-41262

SQL Injection in Galette

Priority MEDIUM 40

Galette is a membership management web application built for non profit organizations and released under GPLv3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01086 Published 2021-12-16 Fixed in 0.9.6 CWE-89
TI-2021-18092 CVE-2021-41260

Missing CSRF checks in Galette

Priority LOW 38

Galette is a membership management web application built for non profit organizations and released under GPLv3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00448 Published 2021-12-16 Fixed in 0.9.6 CWE-352
TI-2021-18093 CVE-2021-41261

Stored Cross-site Scripting in Galette

Priority LOW 36

Galette is a membership management web application built for non profit organizations and released under GPLv3.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.0061 Published 2021-12-16 Fixed in 0.9.6 CWE-79
TI-2021-04419 CVE-2021-21319

Several stored XSS

Priority LOW 32

Galette is a membership management web application geared towards non profit organizations.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00886 Published 2021-10-25 Fixed in 0.9.5 CWE-79
TI-2025-30447 CVE-2025-48076

Galette is vulnerable to Cross-site Scripting

Priority LOW 23

Galette is a membership management web application for non profit organizations.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00179 Published 2025-11-04 Fixed in 1.2.0 CWE-87
TI-2025-33787 CVE-2025-53922

Galette has access control bypass

Priority LOW 8

Galette is a membership management web application for non profit organizations.

CVSS 4.0LOW 1.3 Network Low privileges No interaction EPSS 0.0024 Published 2025-12-19 Fixed in 1.2.0 CWE-863
Open these records in search →