KodExplorer
Kodcloud · 10 CVEs
kodcloud KodExplorer systemRole.class.php roleGroupAction authorization
Apr 19, 2026
kodcloud KodExplorer systemMember.class.php initInstall authorization
Apr 19, 2026
kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication
Apr 19, 2026
kodcloud KodExplorer Public Share share.class.php initShareOld path traversal
Apr 19, 2026
KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint
Dec 11, 2025
Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive i…
Dec 19, 2023
kalcaddle KodExplorer app.php index server-side request forgery
Dec 16, 2023
kalcaddle KodExplorer app.php server-side request forgery
Dec 16, 2023
kalcaddle KodExplorer ZIP Archive app.php unzipList code injection
Dec 16, 2023
kalcaddle KodExplorer API Endpoint unrestricted upload
Dec 16, 2023
A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index…
Sep 6, 2023
KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation f…
Jul 10, 2023
kalcaddle KodExplorer cross-site request forgery
Apr 22, 2023
Arbitrary file access in KodExplorer
Dec 6, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-6571 | kodcloud KodExplorer systemRole.class.php roleGroupAction authorization | MEDIUM | 0.36% | Apr 19, 2026 |
| CVE-2026-6570 | kodcloud KodExplorer systemMember.class.php initInstall authorization | MEDIUM | 0.40% | Apr 19, 2026 |
| CVE-2026-6569 | kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication | MEDIUM | 0.65% | Apr 19, 2026 |
| CVE-2026-6568 | kodcloud KodExplorer Public Share share.class.php initShareOld path traversal | MEDIUM | 0.72% | Apr 19, 2026 |
| CVE-2025-34504 | KodExplorer 4.52 Open Redirect Vulnerability via User Login Endpoint | MEDIUM | 0.32% | Dec 11, 2025 |
| CVE-2023-49489 | Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escalate privileges via t… | MEDIUM | 0.72% | Dec 19, 2023 |
| CVE-2023-6853 | kalcaddle KodExplorer app.php index server-side request forgery | CRITICAL | 0.70% | Dec 16, 2023 |
| CVE-2023-6852 | kalcaddle KodExplorer app.php server-side request forgery | CRITICAL | 0.76% | Dec 16, 2023 |
| CVE-2023-6851 | kalcaddle KodExplorer ZIP Archive app.php unzipList code injection | CRITICAL | 0.91% | Dec 16, 2023 |
| CVE-2023-6850 | kalcaddle KodExplorer API Endpoint unrestricted upload | CRITICAL | 0.84% | Dec 16, 2023 |
| CVE-2021-36646 | A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page. | MEDIUM | 0.81% | Sep 6, 2023 |
| CVE-2023-37153 | KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation feature. An attacker can exploit this vul… | MEDIUM | 0.73% | Jul 10, 2023 |
| CVE-2022-4944 | kalcaddle KodExplorer cross-site request forgery | HIGH | 2.67% | Apr 22, 2023 |
| CVE-2022-46154 | Arbitrary file access in KodExplorer | HIGH | 0.86% | Dec 6, 2022 |
Showing 1 to 10 of 10 CVEs