Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
XODA records in CISA KEVNo XODA vulnerabilities are listed in CISA KEV.
Priority HIGH 81
XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01776 · Published 2025-08-08 · No fix listed CWE-434
Open these records in search →