Vendors / opensource-socialnetwork Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now opensource-socialnetwork records in CISA KEV No opensource-socialnetwork vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users to read other users' private message attac…
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00257 · Published 2026-10-10 · No fix listed CWE-639
Priority MEDIUM 42
Open Source Social Network (OSSN) is open-source social networking software developed in PHP.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00369 · Published 2026-04-24 · Fixed in 9.0 CWE-400
Priority LOW 36
Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers to download files via album/getphoto and album/getcover.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00326 · Published 2026-10-12 · No fix listed CWE-862
Priority LOW 36
OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0021 · Published 2025-11-05 · No fix listed CWE-89
Priority LOW 33
An issue was discovered in Open Source Social Network (OSSN) through 5.3.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.03797 · Published 2020-03-30 · No fix listed CWE-338
Priority LOW 32
Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.
CVSS 3.1 HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00292 · Published 2025-11-03 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 3 0 0
THREATIST.IORead the docs