Cloudron
by Cloudron
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-40868 | Med | 0.43 | 6.1 | 0.09 | Sep 21, 2021 | In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS. | ||
| CVE-2026-79363 | Med | 0.38 | 5.9 | 0.00 | Oct 9, 2026 | Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient… |
- risk 0.43cvss 6.1epss 0.09
In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Reflected XSS.
- risk 0.38cvss 5.9epss 0.00
Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient…