CRITICAL9.8CVE-2020-21808NukeViet SQL Injection vulnerability via topicsid parameter >= 4.0.10, < 4.3.08
>= 4.0, < 4.0.29
CRITICAL9.8CVE-2019-7725Deserialization of Untrusted Data in NukeViet from 0, < 4.3.04
CRITICAL9.8SQL Injection in NukeViet
from 0, < 4.3.04
HIGH8.8nukeviet Deserialization of Untrusted Data vulnerability
from 0, <= 4.5
HIGH8.8NukeViet Cross-Site Request Forgery (CSRF)
HIGH8.7NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function
from 0, < 4.6.00
HIGH8.7NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module
from 0, < 4.6.00
HIGH8.7NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
from 0, < 4.6.00
HIGH8.7NukeViet CMS: Stored Cross-Site Scripting (XSS) via insufficient server-side input sanitization in Request class
from 0, <= 4.4.01
HIGH8.2NukeViet: Unauthenticated Reflected XSS in Comment Module
from 0, < 4.6.00
HIGH7.2NukeViet: Pre-authentication SSRF via X-Forwarded-Host
from 0, < 4.6.00
MEDIUM6.5NukeViet Cross-Site Request Forgery (CSRF)
MEDIUM6.5NukeViet Cross-Site Request Forgery (CSRF)
MEDIUM6.1NukeView CMS vulnerable to Cross-site Scripting
from 0, < 4.5
MEDIUM6.1NukeViet Cross-site Scripting via the editor in the News module
>= 4.4.0, < 4.4.01
MEDIUM5.4Cross-site Scripting in NukeViet CMS
from 0, < 4.5.02