TI-2026-21243 CVE-2026-26273 · GHSA-78wq-6gcv-w28r
Known affected by Account Takeover via Password Reset Token Leakage
Priority HIGH 82
Known is a social publishing platform.
idno
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
idno records in CISA KEVNo idno vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-22770 CVE-2026-28508 · GHSA-fcrh-fqxh-6fx6
Idno: Unauthenticated SSRF via URL Unfurl Endpoint
Priority MEDIUM 47
Idno is a social publishing platform.
TI-2026-22769 CVE-2026-28507 · GHSA-37j7-56xc-c468
Idno: Remote Code Execution via Chained Import File Write and Template Path Traversal
Priority MEDIUM 41
Idno is a social publishing platform.
TI-2022-14517 CVE-2022-33011 · GHSA-p757-4v3p-j74f
Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover…
Priority MEDIUM 41
Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack.
TI-2022-13859 CVE-2022-32115 · GHSA-5jgj-h9wp-53fr
An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute…
Priority LOW 30
An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.
TI-2022-13308 CVE-2022-31290 · GHSA-g688-7j3c-h9f3
A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows…
Priority LOW 26
A cross-site scripting (XSS) vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field.
TI-2022-12959 CVE-2022-30852 · GHSA-4v4p-87m3-5423
Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).
Priority LOW 22
Known v1.3.1 was discovered to contain an Insecure Direct Object Reference (IDOR).