Hubzilla is a decentralized social networking and content-sharing platform whose vulnerability exposure concentrates in web-application input handling, with recurring weaknesses in cross-site scripting, open redirects, and input sanitization. Treat this as a compact vendor profile rather than a broad trend line; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Hubzilla over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-27257HIGH A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema paramete | Apr 15, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-27258MEDIUM Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or HTML via the rpath parameter. | Apr 15, 2022 | 6.1 | 21 | NO | NO |
CVE-2022-27256MEDIUM A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter. | Apr 13, 2022 | 6.1 | 17 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Hubzilla.
Media articles that mention a CVE ID that affects a product developed by Hubzilla — matched by CVE ID, not by vendor name.