en
Severity across 6 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 6 vulnerability records affecting Site Reviews.
Among the 6 records analyzed by CyStack, 3 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-82925Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature | Exploitation statusPublic exploit | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2025-1232Site Reviews < 7.2.5 - Unauthenticated Stored XSS | Exploitation statusPublic exploit | FixYes | Published03/19/2025 | SeverityHigh |
CVE-2024-3050Site Reviews < 7.0.0 - IP Spoofing | Exploitation statusPublic exploit | FixYes | Published05/29/2024 | SeverityCritical |
CVE-2023-1525Site Reviews < 6.7.1 - Admin+ Stored XSS | Exploitation statusPublic exploit | FixYes | Published05/02/2023 | SeverityMedium |
CVE-2021-24973Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting | Exploitation statusNot confirmed | FixYes | Published01/03/2022 | SeverityUnknown |
CVE-2021-24603Site Reviews < 5.13.1 - Authenticated Stored XSS | Exploitation statusNot confirmed | FixYes | Published09/06/2021 | SeverityUnknown |
