Known Vulnerabilities for Site Server by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Site Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41472 json | CyberPanel versions prior to 2.4.4 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-41318 json | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. P... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-41060 json | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `isSSRFSafeURL()` function in `objects/function... | Not Provided | 2026-04-21 | 2026-04-22 |
| CVE-2026-40487 json | Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authenticat... | Not Provided | 2026-04-18 | 2026-04-20 |
| CVE-2026-40484 json | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the database backup restore functionality e... | Not Provided | 2026-04-18 | 2026-04-20 |
| CVE-2026-40472 json | In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitizat... | Not Provided | 2026-04-23 | 2026-04-23 |
| CVE-2026-40471 json | hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigg... | Not Provided | 2026-04-23 | 2026-04-23 |
| CVE-2026-40255 json | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. In @adonisjs/http-server versions pri... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2026-39621 json | Cross-Site Request Forgery (CSRF) vulnerability in spicethemes SpicePress spicepress allows Upload a Web Shell to a Web Serve... | Not Provided | 2026-04-08 | 2026-04-09 |
| CVE-2026-39620 json | Cross-Site Request Forgery (CSRF) vulnerability in priyanshumittal Appointment appointment allows Upload a Web Shell to a Web... | Not Provided | 2026-04-08 | 2026-04-14 |