Vulnerabilities

TI-2025-39373 CVE-2025-63585 · GHSA-h5hr-wq48-rq9c

OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in…

LOW 36

OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0021 Published 2025-11-05 No fix listed CWE-89

TI-2025-39316 CVE-2025-63441 · GHSA-qf9q-8wmm-xcvc

LOW 32

Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00292 Published 2025-11-03 No fix listed CWE-79

TI-2020-08475 CVE-2020-10560 · GHSA-4ppm-32h4-4764

LOW 33

An issue was discovered in Open Source Social Network (OSSN) through 5.3.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03797 Published 2020-03-30 No fix listed CWE-338