CoreCVE

CVE Browser

Today· Oct 7th 181Last 7 days 3,228CISA KEV 1,734Critical 42,648 All stats
More filters (active)

Page 1 (more results available)

Vendor: Bookstackapp Remove filter Clear all
CVE-2026-89022 CRITICAL

BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion

CVSS 9.1 EPSS 0.46% Sep 15, 2026
CVE-2026-84695 CRITICAL

BookStack before 26.05.4 Stored XSS via Drawing Upload

CVSS 9.3 EPSS 0.47% Sep 2, 2026
CVE-2026-82450 HIGH

BookStack before 26.05.4 Remote Code Execution via Book Cover

CVSS 8.7 EPSS 1.00% Aug 29, 2026
CVE-2026-67204 MEDIUM

BookStack < 26.05.4 Broken Access Control via Image Gallery API

CVSS 5.3 EPSS 0.41% Aug 24, 2026
CVE-2026-5484 MEDIUM

BookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access control

CVSS 6.9 EPSS 0.55% Apr 3, 2026
CVE-2024-36676 HIGH

Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public…

CVSS 8.8 EPSS 0.65% Jul 9, 2024
CVE-2023-6199 MEDIUM

Book Stack v23.10.2 - LFR via Blind SSRF

CVSS 6.5 EPSS 1.38% Nov 20, 2023
CVE-2023-4624 LOW

Server-Side Request Forgery (SSRF) in bookstackapp/bookstack

CVSS 2.4 EPSS 0.63% Aug 30, 2023
CVE-2022-40690 MEDIUM

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script.

CVSS 5.4 EPSS 0.77% Oct 24, 2022
CVE-2022-0877 MEDIUM

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

CVSS 5.4 EPSS 0.78% Mar 8, 2022
CVE-2021-4194 MEDIUM

Improper Access Control in bookstackapp/bookstack

CVSS 6.5 EPSS 0.71% Jan 6, 2022
CVE-2021-4119 CRITICAL

Improper Access Control in bookstackapp/bookstack

CVSS 9.8 EPSS 26.89% Dec 15, 2021
CVE-2021-3944 MEDIUM

Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack

CVSS 6.8 EPSS 0.64% Dec 2, 2021
CVE-2021-4026 MEDIUM

Improper Access Control in bookstackapp/bookstack

CVSS 4.3 EPSS 0.93% Nov 30, 2021
CVE-2021-3915 MEDIUM

Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack

CVSS 5.7 EPSS 0.96% Nov 13, 2021
CVE-2021-3916 MEDIUM

Path Traversal in bookstackapp/bookstack

CVSS 6.5 EPSS 1.24% Nov 5, 2021
CVE-2021-3906 MEDIUM

Unrestricted Upload of File with Dangerous Type in bookstackapp/bookstack

CVSS 6.5 EPSS 0.67% Oct 27, 2021
CVE-2021-3874 MEDIUM

Path Traversal in bookstackapp/bookstack

CVSS 6.5 EPSS 1.20% Oct 15, 2021
CVE-2021-3768 MEDIUM

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

CVSS 5.4 EPSS 0.58% Sep 6, 2021
CVE-2021-3767 MEDIUM

Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack

CVSS 5.4 EPSS 0.58% Sep 6, 2021
CVE-2021-3758 MEDIUM

Server-Side Request Forgery (SSRF) in bookstackapp/bookstack

CVSS 6.5 EPSS 0.80% Sep 2, 2021
CVE-2020-26260 MEDIUM

Server Side Request Forgery in BookStack

CVSS 6.4 EPSS 0.84% Dec 9, 2020
CVE-2020-26211 HIGH

Cross-Site Scripting in BookStack

CVSS 8.7 EPSS 1.10% Nov 3, 2020
CVE-2020-26210 HIGH

Cross-Site Scripting in BookStack

CVSS 8.7 EPSS 1.17% Nov 3, 2020
CVE-2020-11055 MEDIUM

Cross-site Scripting in BookStack

CVSS 6.3 EPSS 0.78% May 7, 2020

Showing 1 to 25 CVEs · page 1 (more available)