skygroup güvenlik açıkları (CVE)

7.8Yüksek

CVE-2026-39454 6 ay önce

Sky Co.,LTD. SKYSEA Client View; Sky Co.,LTD. SKYMEC IT Manager

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the prod…

7.1Yüksek

CVE-2026-25356 7 ay önce

WordPress Yobazar theme < 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Yobazar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.This issue affects Yobazar: from n/a through < 1.6.7.

6.5Orta

CVE-2026-25355 7 ay önce

WordPress Sanzo theme < 2.4.3 - Cross Site Scripting (XSS) vulnerability

skygroup Sanzo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Sanzo sanzo allows Stored XSS.This issue affects Sanzo: from n/a through < 2.4.3.

7.1Yüksek

CVE-2026-25354 7 ay önce

WordPress Reebox theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Reebox

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through < 1.4.8.

7.1Yüksek

CVE-2026-25353 7 ay önce

WordPress Nooni theme < 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Nooni

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through < 1.5.1.

7.1Yüksek

CVE-2026-25352 7 ay önce

WordPress MyDecor theme < 1.5.9 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup MyDecor

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyDecor mydecor allows Reflected XSS.This issue affects MyDecor: from n/a through < 1.5.9.

7.1Yüksek

CVE-2026-25351 7 ay önce

WordPress MyMedi theme < 1.7.7 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup MyMedi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyMedi mymedi allows Reflected XSS.This issue affects MyMedi: from n/a through < 1.7.7.

7.1Yüksek

CVE-2026-25350 7 ay önce

WordPress Miti theme < 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Miti

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This issue affects Miti: from n/a through < 1.5.3.

7.1Yüksek

CVE-2026-25349 7 ay önce

WordPress Loobek theme < 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Loobek

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.This issue affects Loobek: from n/a through < 1.5.2.

7.1Yüksek

CVE-2026-25304 7 ay önce

WordPress Jaroti theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Jaroti

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/a through < 1.4.8.

7.1Yüksek

CVE-2026-27332 8 ay önce

WordPress Agrofood theme < 1.4.0 - Cross Site Scripting (XSS) vulnerability

skygroup Agrofood

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: from n/a through < 1.4.0.

7.1Yüksek

CVE-2025-59556 1 yıl önce

WordPress GoStore theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

skygroup GoStore

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.

7.1Yüksek

CVE-2025-58964 1 yıl önce

WordPress Enzy theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

skygroup Enzy

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.

7.1Yüksek

CVE-2025-48296 1 yıl önce

WordPress UpStore <= 1.7.0 - Cross Site Scripting (XSS) Vulnerability

skygroup UpStore

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through <= 1.7.0.

7.1Yüksek

CVE-2025-54055 1 yıl önce

WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

skygroup Druco

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through <= 1.5.2.

9.8Kritik

CVE-2016-7836 KEV 9 yıl önce

SKYSEA Client View Improper Authentication Vulnerability

Sky Co., LTD. SKYSEA Client View

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.

19%EPSS