Log in Start free

qriouslad

Products

ProductCVEsExploitedLatest
System Dashboard7–Sep 26, 2025
Debug Log Manager – Conveniently Monitor and Inspect Errors4–Oct 31, 2026
Code Explorer2–Feb 4, 2026
Admin and Site Enhancements (ASE)1–Nov 12, 2024

Exploited and recent CVEs

  • CVE-2026-120114 High 7.2 Debug Log Manager <= 2.5.2 - Unauthenticated Stored Cross-Site Scripting via 'log_js_errors' AJAX Endpoint 0.4%
  • CVE-2026-9016 Medium 5.3 Debug Log Manager <= 2.5.0 - Unauthenticated Improper Output Neutralization for Logs via log_js_errors AJAX Action 0.3%
  • CVE-2025-15487 Medium 4.9 Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter 0.5%
  • CVE-2025-10377 Medium 4.3 System Dashboard <= 2.8.20 - Cross-Site Request Forgery 0.2%
  • CVE-2025-3809 High 7.2 Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2024-12299 Medium 6.1 System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter 0.4%
  • CVE-2024-10790 Medium 5.4 Admin and Site Enhancements (ASE) <= 7.5.1 - Authenticated Stored Cross-Site Scripting via SVG 0.3%
  • CVE-2023-5816 Medium 4.9 Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading 0.5%
  • CVE-2023-5710 Medium 4.3 System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants) 0.5%
  • CVE-2023-5713 Medium 4.3 System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value) 0.5%
  • CVE-2023-5712 Medium 4.3 System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value) 0.4%
  • CVE-2023-5714 Medium 4.3 System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs) 0.4%
  • CVE-2023-5711 Medium 4.3 System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info) 0.4%
  • CVE-2023-5772 Medium 4.3 Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery 0.3%