Log in Start free

BookStackApp

Products

ProductCVEsExploitedLatest
bookstackapp/bookstack13–Aug 30, 2023
BookStack11–Oct 24, 2026

Exploited and recent CVEs

  • CVE-2026-116020 Medium 5.4 BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages 0.2%
  • CVE-2026-89022 High 7.4 BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion 0.5%
  • CVE-2026-84695 High 8.7 BookStack before 26.05.4 Stored XSS via Drawing Upload 0.5%
  • CVE-2026-82450 High 8.8 BookStack before 26.05.4 Remote Code Execution via Book Cover 1.0%
  • CVE-2026-67204 Medium 5.4 BookStack < 26.05.4 Broken Access Control via Image Gallery API 0.4%
  • CVE-2026-5484 Medium 5.3 BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control 0.3%
  • CVE-2023-4624 Low 2.4 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack 0.6%
  • CVE-2022-0877 High 7.6 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack 0.8%
  • CVE-2021-4194 Medium 4.3 Improper Access Control in bookstackapp/bookstack 0.7%
  • CVE-2021-4119 Medium 5.3 Improper Access Control in bookstackapp/bookstack 26.9%
  • CVE-2021-3944 Low 3.1 Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack 0.6%
  • CVE-2021-4026 Medium 6.5 Improper Access Control in bookstackapp/bookstack 0.9%
  • CVE-2021-3915 High 7.6 Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack 1.0%
  • CVE-2021-3916 Medium 6.5 Path Traversal in bookstackapp/bookstack 1.2%
  • CVE-2021-3906 Medium 5.4 Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack 0.7%
  • CVE-2021-3874 Medium 4.3 Path Traversal in bookstackapp/bookstack 1.2%
  • CVE-2021-3768 Medium 5.4 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack 0.6%
  • CVE-2021-3767 Medium 5.4 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack 0.6%
  • CVE-2021-3758 Medium 6.3 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack 0.8%
  • CVE-2020-26260 Medium 6.4 Server Side Request Forgery in BookStack 0.8%
  • CVE-2020-26211 High 7.7 Cross-Site Scripting in BookStack 1.1%
  • CVE-2020-26210 High 7.7 Cross-Site Scripting in BookStack 1.2%
  • CVE-2020-11055 Medium 6.3 Cross-site Scripting in BookStack 0.8%
  • CVE-2020-5256 High 7.9 Remote Code Execution Through Image Uploads in BookStack 2.0%