[ Vendor · 8 CVEs ]
opencats
CVEs affecting opencats published in the last 30 days, plus any opencats CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115513 | 22 Oct 2026 | CVSS 8.7 | OpenCATSOpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript… | |
| CVE-2026-113349 | 20 Oct 2026 | CVSS 4.3 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() and onDeleteEvent() that allows authenticated… | |
| CVE-2026-112783 | 20 Oct 2026 | CVSS 4.3 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and ajax/editActivity.php that allows READ-level… | |
| CVE-2026-112784 | 20 Oct 2026 | CVSS 4.3 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php that allows any authenticated user to send mail… | |
| CVE-2026-112785 | 20 Oct 2026 | CVSS 4.3 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users to create, rename, delete, and populate saved… | |
| CVE-2026-112786 | 20 Oct 2026 | CVSS 5.4 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to… | |
| CVE-2026-112787 | 20 Oct 2026 | CVSS 4.3 | OpenCATSOpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenticated users to view EEO… | |
| CVE-2026-54454 | 13 Oct 2026 | CVSS 9.1 | OpenCATSOpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import… |