Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: invisioncommunity Component: Invisioncommunity Clear all filters
TI-2025-30319 CVE-2025-47916 · GHSA-96q3-fjrx-h9hh

Code injection in invisioncommunity Invision Power Board

Priority CRITICAL 90

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.84318 Published 2025-05-16 Fixed in 5.0.7 CWE-1336
TI-2024-19914 CVE-2024-30163 · GHSA-8cjv-25v5-q73j

Invision Community before 4.7.16 allow SQL injection via the…

Priority MEDIUM 53

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\_store::_categoryView() method, where user input passed through the filter reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08676 Published 2024-06-07 No fix listed CWE-89