PatchTheCVEcreative-solutions vulnerabilities
Recent CVEs affecting creative-solutions products. 5 tracked.
creative-solutions has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2023-11-06. Highest priority: CVE-2014-8739 (score 69/100).
- CVE-2023-37988 HIGH 7.1 UPGRADE Unauth
- CVE-2023-35911 HIGH 8.5 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative
- CVE-2023-23758 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL
- CVE-2020-9364 MEDIUM 5.3 DOWNGRADE An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 f
- CVE-2014-8739 CRITICAL 9.8 UPGRADE UPGRADE Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4
FAQ
How do I fix creative-solutions vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is creative-solutions being exploited right now?
None of the tracked creative-solutions CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which creative-solutions CVE should I patch first?
CVE-2014-8739 currently ranks highest (69/100): Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 .