Skip to content
SSismics
Products
| Product | CVEs | Exploited | Latest |
|---|
| docs | 2 | – | Jan 10, 2022 |
| Teedy | 2 | – | Oct 16, 2025 |
Exploited and recent CVEs
-
CVE-2025-11853
Medium 6.3
Sismics Teedy API Endpoint file access control
0.5%
-
CVE-2025-22963
High 7.5
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
0.3%
-
CVE-2022-22115
Critical 9.0
Teedy - Stored Cross-Site Scripting (XSS) in Tag Name
1.1%
-
CVE-2022-22114
Critical 9.6
Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality
1.3%