Vendor/product archive

opensource-socialnetwork / open_source_social_network CVEs

Beta · best-effort

3 CVEs tagged to opensource-socialnetwork / open_source_social_network — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to opensource-socialnetwork vendor archive

CVE-2025-63585

Published Nov 5, 2025

OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2025-63441

Published Nov 3, 2025

Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.

CVSS 7.3 · High

Vendor/product tagsBeta · best-effort

CVE-2020-10560

Published Mar 30, 2020

An issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file path with a weak cryptographic rand() can be used to read any file with the permis…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1