Threat database

5 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.7%	CVE-2025-49070Elessi · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.7%2025-07-04CVE Database V5CVE-2025-49070 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File Inclusion.This issue affects Elessi: from n/a through < 6.4.1. EPSS 0.7%Vulnerability NasaTheme	CVE Database V5	2025-07-04
High	7.1	EPSS 0.3%	CVE-2025-49873Elessi · Cross-site Scripting High7.1EPSS 0.3%2025-06-20CVE Database V5CVE-2025-49873 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Elessi elessi-theme allows Reflected XSS.This issue affects Elessi: from n/a through <= 6.3.9. EPSS 0.3%Vulnerability NasaTheme	CVE Database V5	2025-06-20
Critical	10.0	EPSS 0.5%	CVE-2025-49071Flozen · Unrestricted Upload of File with Dangerous Type Critical10.0EPSS 0.5%2025-06-17CVE Database V5CVE-2025-49071 Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flozen: from n/a through < 1.5.1. EPSS 0.5%Vulnerability NasaTheme	CVE Database V5	2025-06-17
High	7.1	EPSS 0.3%	CVE-2025-39508Nasa Core · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in NasaTheme Nasa… High7.1EPSS 0.3%2025-06-17CVE Database V5CVE-2025-39508 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Reflected XSS.This issue affects Nasa Core: from n/a through <= 6.4.4. EPSS 0.3%Vulnerability NasaTheme	CVE Database V5	2025-06-17
Medium	6.5	EPSS 0.2%	CVE-2025-49067Nasa Core · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in NasaTheme Nasa… Medium6.5EPSS 0.2%2025-06-06CVE Database V5CVE-2025-49067 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Stored XSS.This issue affects Nasa Core: from n/a through < 6.4.1. EPSS 0.2%Vulnerability NasaTheme	CVE Database V5	2025-06-06

Showing 1–5 of 5 results