Vulnerabilities

TI-2026-02183 CVE-2026-2557 · GHSA-ggg6-jj2q-72rr

cskefu File Upload MediaController.java upload cross site scripting

MEDIUM 56

A vulnerability was detected in cskefu up to 8.0.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00267 Published 2026-02-16 No fix listed CWE-79

TI-2026-02182 CVE-2026-2556 · GHSA-89wr-3g6x-pxxx

MEDIUM 57

A security vulnerability has been detected in cskefu up to 8.0.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00352 Published 2026-02-16 No fix listed CWE-918

TI-2022-16842 CVE-2022-36521 · GHSA-pvc6-58cx-q3rv

LOW 34

Insecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add administrator accounts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00684 Published 2022-08-26 No fix listed CWE-306