Phraseanet

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phraseanet records in CISA KEV

No Phraseanet vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2018-15382 CVE-2018-25157 · GHSA-gcpq-mrgg-v5f3

Phraseanet 4.0.3 Stored XSS via Document Upload

MEDIUM 56

Phraseanet 4.0.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through crafted file names during document uploads.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00278 Published 2026-02-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0