Froxlor/froxlor
This hub aggregates every CVE we track for Froxlor/froxlor, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
40
CVEs tracked
7
Critical
12
High
0
In CISA KEV
Severity distribution
MEDIUM20HIGH12CRITICAL7LOW1
Monthly trend
0
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
2024-072026-06
Latest CVEs
The 15 most recently published vulnerabilities affecting Froxlor/froxlor.
- CVE-2026-26279Froxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection9.1
- CVE-2025-48958Froxlor has an HTML Injection Vulnerability5.5
- CVE-2025-29773Froxlor allows Multiple Accounts to Share the Same Email Address Leading to Potential Privilege Escalation or Account Takeover5.8
- CVE-2024-34070Froxlor Vulnerable to Blind XSS Leading to Froxlor Application Compromise9.6
- CVE-2023-50256Froxlor username/surname AND company field Bypass7.5
- CVE-2023-6069Improper Link Resolution Before File Access in froxlor/froxlor9.9
- CVE-2023-4829Cross-site Scripting (XSS) - Stored in froxlor/froxlor5.4
- CVE-2023-5564Cross-site Scripting (XSS) - Stored in froxlor/froxlor4.8
- CVE-2023-4304Business Logic Errors in froxlor/froxlor3.8
- CVE-2023-3668Improper Encoding or Escaping of Output in froxlor/froxlor7.2
- CVE-2023-3192Session Fixation in froxlor/froxlor5.4
- CVE-2023-3172Path Traversal in froxlor/froxlor7.2
- CVE-2023-3173Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor9.8
- CVE-2023-2666Allocation of Resources Without Limits or Throttling in froxlor/froxlor7.5
- CVE-2023-2034Unrestricted Upload of File with Dangerous Type in froxlor/froxlor8.8
Product normalization is registry-driven with AI assist and human review. How it works