Skip to content

Vendor

299ko vulnerabilities

2 published CVES affecting 299ko, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of 299ko alerts

Products

Latest 299ko CVEs

Newest publication first

  1. CVE-2026-71249 299Ko - Unauthenticated Reflected XSS in Public Contact Form

    Published
    MediumCVSS 6.1 EPSS 0.25%

    299Ko's public contact form (plugin/contact/controllers/ContactController.php, home) sets raw POST field values (name, firstname, email, message) into the page template with no sanitization. The template engine's variable output function (common/Template.php, _show_var) echoes va...

  2. CVE-2025-8265 299Ko CMS File Management view unrestricted upload

    Published
    MediumCVSS 5.1 EPSS 0.40%

    A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.