opensource-socialnetwork

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

opensource-socialnetwork records in CISA KEV

No opensource-socialnetwork vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Open Source Social Network · all components

TI-2025-39373 CVE-2025-63585 · GHSA-h5hr-wq48-rq9c

LOW 36

OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0021 Published 2025-11-05 No fix listed CWE-89

TI-2020-08475 CVE-2020-10560 · GHSA-4ppm-32h4-4764

LOW 33

An issue was discovered in Open Source Social Network (OSSN) through 5.3.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03797 Published 2020-03-30 No fix listed CWE-338

TI-2025-39316 CVE-2025-63441 · GHSA-qf9q-8wmm-xcvc

LOW 32

Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00292 Published 2025-11-03 No fix listed CWE-79