Priority LOW 36
HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to store files with client-supplied extensions under public/attachments/.
Vulnerabilities
5 records
Priority LOW 31
HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locations/list endpoint.
TI-2026-68443 CVE-2026-104069 · GHSA-6h79-56ph-ww3m
Remote code execution in HortusFox via theme import
Priority MEDIUM 40
HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly into the public web root before any validation of file names, extensio…
TI-2026-62636 CVE-2026-92980 · GHSA-mhp6-2rq5-c7vj
HortusFox-Web < 6.1 Remote Code Execution via Import/Export
Priority MEDIUM 41
HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web server user by abusing the Import/Export functionalit…
TI-2026-50818 CVE-2026-72559 · GHSA-3fwq-xc2g-q79x
Daniel Brendel HortusFox - Cross-Site Scripting
Priority LOW 24
A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode.