Vulnerabilities

TI-2026-20318 CVE-2026-25156

HotCRP vulnerable to stored XSS via comment attachments

LOW 32

HotCRP is conference review software.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00277 Published 2026-01-30 No fix listed CWE-79

TI-2026-19236 CVE-2026-23878

LOW 35

HotCRP is conference review software.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00308 Published 2026-01-19 No fix listed CWE-201

TI-2026-19199 CVE-2026-23836

MEDIUM 49

HotCRP is conference review software.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00456 Published 2026-01-19 No fix listed CWE-20

TI-2022-04415 CVE-2022-4819 · GHSA-x54c-wvwr-mxp3

LOW 28

A vulnerability was found in HotCRP.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2022-12-28 No fix listed CWE-79