Read the docs

invisioncommunity

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

invisioncommunity records in CISA KEV

No invisioncommunity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Invision Power Board 19 records MEDIUM Ips Community Suite 4 records MEDIUM Invisioncommunity 2 records CRITICAL Community 1 record LOW Gallery 1 record LOW

Records

2 records in Invisioncommunity · all components

TI-2025-30319 CVE-2025-47916 · GHSA-96q3-fjrx-h9hh

Code injection in invisioncommunity Invision Power Board

Priority CRITICAL 90

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.84318 Published 2025-05-16 Fixed in 5.0.7 CWE-1336
TI-2024-19914 CVE-2024-30163 · GHSA-8cjv-25v5-q73j

Invision Community before 4.7.16 allow SQL injection via the…

Priority MEDIUM 53

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\_store::_categoryView() method, where user input passed through the filter reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08676 Published 2024-06-07 No fix listed CWE-89
Open these records in search →