Known Vulnerabilities for products from Humhub

Listed below are 12 of the newest known vulnerabilities associated with the vendor "Humhub".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-47657 json Not Provided 2026-07-21 2026-07-21
CVE-2022-31133 json HumHub is an Open Source Enterprise Social Network. Affected versions of HumHub are vulnerable to a stored Cross-Site Scripti... 4.8 - MEDIUM 2022-07-07 2022-07-14
CVE-2022-24865 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 6.5 - MEDIUM 2022-04-20 2022-05-02
CVE-2021-43847 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 6.5 - MEDIUM 2021-12-20 2022-08-09
CVE-2019-12743 json HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network... 5.3 - MEDIUM 2019-07-29 2021-07-21
CVE-2019-11564 json A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML vi... 6.1 - MEDIUM 2019-05-08 2019-05-08
CVE-2019-9094 json A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edit... 6.1 - MEDIUM 2019-03-21 2019-03-25
CVE-2019-9093 json A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition. T... 6.1 - MEDIUM 2019-03-21 2019-03-25
CVE-2017-20028 json A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. Th... 9.8 - CRITICAL 2022-06-09 2022-06-27
CVE-2017-20027 json A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functio... 6.1 - MEDIUM 2022-06-09 2022-06-17
CVE-2017-20026 json A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unkn... 6.1 - MEDIUM 2022-06-09 2022-06-17
CVE-2016-1229 json Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta before 1.0.0-beta.3 allows rem... Not Provided 2016-06-05 2026-05-06
CVE-2014-9528 json SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListController.php... Not Provided 2015-01-06 2026-05-06

Known software with vulnerabilities from Humhub

Type Vendor Product Version
ApplicationHumhubHumhub0.10.0
ApplicationHumhubSocial Network Kit1.3.13

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report