FossbillingCVEs & Vulnerabilities
12 CVEs affecting Fossbilling products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
Most Affected Products
Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5.
Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4.
Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.
Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.
SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1.
Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1.
Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0.
Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.
Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.
Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.