Priority MEDIUM 57
KodExplorer 4.52 contains an open redirect vulnerability in the user login page that allows attackers to manipulate the 'link' parameter.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00321 · Published 2025-12-11 · No fix listed CWE-601
Priority MEDIUM 60
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via the APP_HOST parameter at config/i18n/en/main.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0072 · Published 2023-12-19 · No fix listed CWE-79
Priority HIGH 75
A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00701 · Published 2023-12-16 · No fix listed CWE-918
Priority MEDIUM 43
A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00762 · Published 2023-12-16 · No fix listed CWE-918
Priority MEDIUM 44
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0091 · Published 2023-12-16 · No fix listed CWE-94
Priority MEDIUM 44
A vulnerability was found in kalcaddle KodExplorer up to 4.51.03.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00841 · Published 2023-12-16 · No fix listed CWE-434
Priority MEDIUM 60
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00806 · Published 2023-09-06 · No fix listed CWE-79
Priority MEDIUM 60
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00725 · Published 2023-07-10 · No fix listed CWE-79
Priority MEDIUM 43
A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02666 · Published 2023-04-22 · No fix listed CWE-352
Priority MEDIUM 45
Kodexplorer is a chinese language web based file manager and browser based code editor.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0089 · Published 2022-12-06 · Fixed in 4.50 CWE-22
THREATIST.IORead the docs