Vulnerabilities

TI-2025-33960 CVE-2025-54117

NamelessMC allows Stored Cross-Site Scripting (XSS) in dashboard text editor

HIGH 72

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1CRITICAL 9.1 Network Low privileges User interaction EPSS 0.00409 Published 2025-08-18 Fixed in 2.2.4 CWE-79

TI-2025-34226 CVE-2025-54421

NamelessMC allows Stored Cross Site Scripting (XSS) in SEO component

HIGH 65

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00406 Published 2025-08-18 Fixed in 2.2.4 CWE-79

TI-2025-33961 CVE-2025-54118

NamelessMC allows sensitive information disclosure in member list component

MEDIUM 57

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00454 Published 2025-08-18 Fixed in 2.2.4 CWE-200

TI-2025-23467 CVE-2025-32389

NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages

HIGH 72

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.0051 Published 2025-04-18 Fixed in 2.1.4 CWE-89

TI-2025-22381 CVE-2025-31120

NamelessMC Vulnerable to Cookie-Based View Count Manipulation

MEDIUM 63

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00478 Published 2025-04-18 Fixed in 2.2.0 CWE-565

TI-2025-22379 CVE-2025-31118

NamelessMC Has Forum Reply Submission Time Limit Bypass

MEDIUM 64

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00557 Published 2025-04-18 Fixed in 2.2.0 CWE-400

TI-2025-21663 CVE-2025-30357

NamelessMC Forum Topic Deletion Triggered by Unrelated User Deletion

LOW 34

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.3 Network High privileges User interaction EPSS 0.00463 Published 2025-04-18 Fixed in 2.2.0 CWE-706

TI-2025-21497 CVE-2025-30158

NamelessMC Forum iframe width/height abuse causing UI-based Denial of Service

MEDIUM 64

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00557 Published 2025-04-18 Fixed in 2.2.0 CWE-400

TI-2025-21195 CVE-2025-29784

NamelessMC Has Lack of Length Validation for s Parameter in GET Requests

HIGH 72

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00657 Published 2025-04-18 Fixed in 2.2.0 CWE-1284

TI-2025-16090 CVE-2025-22142

Cross-site Scripting in NamelessMC

HIGH 67

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00288 Published 2025-01-13 No fix listed CWE-79

TI-2025-16092 CVE-2025-22144

Account Takeover in NamelessMC

HIGH 78

NamelessMC is a free, easy to use & powerful website software for Minecraft servers.

CVSS 4.0CRITICAL 9.0 Network No auth No interaction EPSS 0.00778 Published 2025-01-13 No fix listed CWE-610

TI-2022-02614 CVE-2022-2820 · GHSA-mc87-mp22-885h

Session Fixation in namelessmc/nameless

HIGH 69

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00735 Published 2022-08-15 Fixed in v2.0.2 CWE-384

TI-2022-02615 CVE-2022-2821 · GHSA-xjp5-5ph6-c66c

Missing Critical Step in Authentication in namelessmc/nameless

LOW 36

Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01416 Published 2022-08-15 Fixed in v2.0.2 CWE-304

Vulnerabilities

Filters