Major Versions
click and drag to zoom
Security Vulnerabilities for Version:
Severities:
Type
|
Identifier
|
Related Record |
Severity
|
Date Published
|
Description | Versions Affected |
|---|---|---|---|---|---|
| CVE-2022-44036 | Low | Jan 03, 2023 | ** DISPUTED ** In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to more... |
7.2.5
|
|
| BDSA-2021-3740 | Medium | Dec 10, 2021 | B2Evolution contains a cross-site request forgery (CSRF) vulnerability with the User Login page. An attacker could exploit this by sending a crafted li more... |
