anssilaitila
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Shared Files – Frontend File Upload Form & Secure File Sharing | 2 | – | Jun 3, 2025 |
| Contact List – Online Staff Directory & Address Book | 1 | – | Mar 20, 2026 |
Exploited and recent CVEs
- CVE-2026-3516 Contact List <= 3.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_cl_map_iframe' Parameter 0.3%
- CVE-2025-4392 Shared Files <= 1.7.48 - Unauthenticated Stored Cross-Site Scripting via sanitize_file Function 0.4%
- CVE-2024-13504 Shared Files – Frontend File Upload Form & Secure File Sharing <= 1.7.42 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload 0.4%