PatchTheCVEnexusphp vulnerabilities and fixes
Recent CVEs affecting nexusphp, with upgrade or downgrade steps. 4 tracked.
nexusphp has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-01-19. Highest priority: CVE-2022-46887 (score 72/100).
- CVE-2022-46890 MEDIUM 4.3 UPGRADE Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum
- CVE-2022-46889 MEDIUM 5.4 UPGRADE A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated at
- CVE-2022-46888 MEDIUM 6.1 UPGRADE Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attacker
- CVE-2022-46887 CRITICAL 9.8 UPGRADE Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary S
FAQ
How do I fix nexusphp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nexusphp being exploited right now?
None of the tracked nexusphp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nexusphp CVE should I patch first?
CVE-2022-46887 currently ranks highest (72/100): Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary S.