Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

specialk Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity
`CVE-2026-81825`Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productSimple Ajax Chat – Add a Fast, Secure Chat Box	Published09/11/2026	SeverityHigh
`CVE-2026-3876`Prismatic <= 3.7.3 - Unauthenticated Stored Cross-Site Scripting via 'prismatic_encoded' Pseudo-Shortcode	Exploitation statusNot known exploited	FixYes	Affected productPrismatic	Published04/16/2026	SeverityHigh
`CVE-2026-4278`Simple Download Counter <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute	Exploitation statusNot known exploited	FixYes	Affected productSimple Download Counter	Published03/26/2026	SeverityMedium
`CVE-2026-4329`Blackhole for Bad Bots <= 3.8 - Unauthenticated Stored Cross-Site Scripting via User-Agent HTTP Header	Exploitation statusNot known exploited	FixYes	Affected productBlackhole for Bad Bots	Published03/26/2026	SeverityHigh
`CVE-2026-2987`Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'	Exploitation statusNot known exploited	FixYes	Affected productSimple Ajax Chat – Add a Fast, Secure Chat Box	Published03/12/2026	SeverityMedium
`CVE-2026-2126`User Submitted Posts <= 20260113 - Incorrect Authorization to Unauthenticated Category Restriction Bypass via 'user-submitted-category' Parameter	Exploitation statusNot known exploited	FixYes	Affected productUser Submitted Posts – Enable Users to Submit Posts from the Front End	Published02/18/2026	SeverityMedium
`CVE-2026-0800`User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20251210 - Unauthenticated Stored Cross-Site Scripting via Custom Field	Exploitation statusNot known exploited	FixYes	Affected productUser Submitted Posts – Enable Users to Submit Posts from the Front End	Published01/24/2026	SeverityHigh
`CVE-2026-0608`Head Meta Data <= 20251118 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta	Exploitation statusNot known exploited	FixYes	Affected productHead Meta Data	Published01/20/2026	SeverityMedium
`CVE-2026-0913`User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode	Exploitation statusNot known exploited	FixYes	Affected productUser Submitted Posts – Enable Users to Submit Posts from the Front End	Published01/16/2026	SeverityMedium
`CVE-2025-13677`Simple Download Counter <= 2.2.2 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal	Exploitation statusNot known exploited	FixYes	Affected productSimple Download Counter	Published12/10/2025	SeverityMedium
`CVE-2025-10745`Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass	Exploitation statusNot known exploited	FixYes	Affected productBanhammer – Monitor Site Traffic, Block Bad Users and Bots	Published09/26/2025	SeverityMedium
`CVE-2025-2874`User Submitted Posts <= 20241026 - Authenticated (Admin+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productUser Submitted Posts – Enable Users to Submit Posts from the Front End	Published04/03/2025	SeverityMedium
`CVE-2025-1730`Simple Download Counter <= 2.0 - Authenticated (Author+) Arbitrary File Read	Exploitation statusNot known exploited	FixYes	Affected productSimple Download Counter	Published03/01/2025	SeverityMedium
`CVE-2024-0979`Dashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productDashboard Widgets Suite	Published06/13/2024	SeverityMedium
`CVE-2024-2956`Simple Ajax Chat <= 20231101 - Authenticated (Admin+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productSimple Ajax Chat – Add a Fast, Secure Chat Box	Published03/27/2024	SeverityMedium
`CVE-2023-5614`Theme Switcha <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Exploitation statusNot known exploited	FixYes	Affected productTheme Switcha – Easily Switch Themes for Development and Testing	Published10/20/2023	SeverityMedium
`CVE-2023-4838`CVE-2023-4838	Exploitation statusNot known exploited	FixNot confirmed	Affected productSimple Download Counter	Published09/09/2023	SeverityMedium
`CVE-2023-4779`User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	Exploitation statusNot known exploited	FixYes	Affected productUser Submitted Posts – Enable Users to Submit Posts from the Front End	Published09/06/2023	SeverityMedium
`CVE-2023-4308`User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'	Exploitation statusNot known exploited	FixYes	Affected productUser Submitted Posts – Enable Users to Submit Posts from the Front End	Published08/15/2023	SeverityHigh
`CVE-2019-25138`User Submitted Posts <= 20190312 - Unauthenticated Arbitrary File Upload	Exploitation statusNot known exploited	FixYes	Affected productUser Submitted Posts – Enable Users to Submit Posts from the Front End	Published06/07/2023	SeverityCritical