Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Dcatadmin

First CVE: May 31, 2023Active for: 3 yearsTotal CVEs: 6

Dcatadmin maintains a narrowly scoped administrative interface product that handles user input and dynamic code generation across web request processing, presenting a modest but concentrated vulnerability surface. Vulnerabilities affecting this product skew toward serious outcomes and recur through weakness classes characteristic of server-side code execution and web-layer injection risks: cross-site scripting, PHP remote file inclusion, and code injection, all of which reflect insufficient input sanitization and unsafe dynamic code handling in server-side contexts. Defenders should treat this product as a high-value target if exposed to untrusted networks; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
2.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 80% of tracked vendors
6.0
Avg CVSS Score
Higher Avg CVSS Score than 29% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Dcatadmin over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 31, 2023
3 years ago
Most Recent CVE
Dec 2, 2025
234 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-65656CRITICAL
dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php.
Dec 2, 20259.833NONO
CVE-2024-29644MEDIUM
Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote attacker to execute arbitrary code via a crafted script to the user login box.
Mar 26, 20246.120NONO
CVE-2023-33736MEDIUM
A stored cross-site scripting (XSS) vulnerability in Dcat-Admin v2.1.3-beta allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL pa
May 31, 20235.418NONO
CVE-2025-0709MEDIUM
A vulnerability was found in Dcat-Admin 2.2.1-beta. It has been rated as problematic. This issue affects some unknown processing of the file /admin/auth/roles of the component Role
Jan 24, 20254.816NONO
CVE-2024-54775MEDIUM
Dcat-Admin v2.2.0-beta and v2.2.2-beta contains a Cross-Site Scripting (XSS) vulnerability via /admin/auth/menu and /admin/auth/extensions.
Dec 27, 20244.816NONO
CVE-2024-54774MEDIUM
Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create.
Dec 27, 20244.816NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
83%
17%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (16.7%)
Unknown0 (0.0%)
Required5 (83.3%)
Privileges Required
Low1 (16.7%)
High3 (50.0%)
None2 (33.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Dcatadmin.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Dcatadmin — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Dcatadmin's Products

View all 2 CNAs →

Top CWEs