Publify is a lightweight open-source blogging and content-management platform whose vulnerability profile centers on its core product and reflects application-layer input-handling concerns, specifically cross-site scripting in web page generation and uncontrolled resource consumption. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Publify over time
Signals from CVEs in this vendor scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-1812CRITICAL Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 9.8 | 48 | NO | NO |
CVE-2023-0299CRITICAL Improper Input Validation in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-0569MEDIUM Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10. | Jan 29, 2023 | 6.5 | 23 | NO | NO |
CVE-2022-2815MEDIUM Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. | Jan 14, 2023 | 6.5 | 23 | NO | NO |
CVE-2022-0578MEDIUM Code Injection in GitHub repository publify/publify prior to 9.2.8. | May 16, 2022 | 6.5 | 23 | NO | NO |
CVE-2022-0574MEDIUM Improper Access Control in GitHub repository publify/publify prior to 9.2.8. | May 16, 2022 | 6.5 | 23 | NO | NO |
CVE-2021-25973MEDIUM In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end re | Nov 2, 2021 | 6.5 | 22 | NO | NO |
CVE-2022-1811MEDIUM Unrestricted Upload of File with Dangerous Type in GitHub repository publify/publify prior to 9.2.9. | May 23, 2022 | 5.4 | 20 | NO | NO |
CVE-2021-25974MEDIUM In Publify, versions v8.0 to v9.2.4 are vulnerable to stored XSS. A user with a “publisher” role is able to inject and execute arbitrary JavaScript code while creating a page/artic | Nov 10, 2021 | 5.4 | 20 | NO | NO |
CVE-2022-0524HIGH Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. | Feb 8, 2022 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (15 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Publify.
Media articles that mention a CVE ID that affects a product developed by Publify — matched by CVE ID, not by vendor name.