humhub

Top products

The 15 most recently published vulnerabilities affecting humhub.

• CVE-2025-65963CFiles Unauthorized Folder/ZIP Access in Public Spaces5.4Nov 25, 2025
• CVE-2025-64442HumHub is vulnerable to XSS through its Meta Search component6.1Nov 7, 2025
• CVE-2025-54790Files: Potential for SQL Injection through File Browse and List Operations6.5Aug 1, 2025
• CVE-2025-54789Files is Vulnerable to Reflected Self-XSS through its File Move Functionality6.1Aug 1, 2025
• CVE-2024-52043User enumeration in HubHub5.3Nov 6, 2024
• CVE-2022-31133Cross site scripting in HumHub5.9Jul 7, 2022
• CVE-2017-20028HumHub privileges management5.6Jun 9, 2022
• CVE-2017-20027HumHub DOM cross site scriting4.3Jun 9, 2022
• CVE-2017-20026HumHub Reflected cross site scriting4.3Jun 9, 2022
• CVE-2022-24865Improper access control in humhub6.5Apr 20, 2022
• CVE-2021-43847Authorization Bypass in Space Invite in HumHub6.5Dec 20, 2021
• CVE-2019-12743HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after t...5.3Jul 29, 2019
• CVE-2019-11564A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index....6.1May 8, 2019
• CVE-2019-9094A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing JavaScript in the filename is ec...6.1Mar 18, 2019
• CVE-2019-9093A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. The user-supplied input containing a JavaScript payload in the filename p...6.1Mar 18, 2019