Havalite CMS

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Havalite CMS records in CISA KEV

No Havalite CMS vulnerabilities are listed in CISA KEV.

1 record

TI-2013-06196 CVE-2013-10055 · GHSA-gwv8-67p9-8v37

HIGH 81

An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0174 Published 2025-08-01 No fix listed CWE-434