PatchTheCVEhoosk vulnerabilities
Recent CVEs affecting hoosk products. 4 tracked.
hoosk has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-14. Highest priority: CVE-2024-51055 (score 40/100).
- CVE-2025-25991 MEDIUM 5.1 DOWNGRADE SQL Injection vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive information via t
- CVE-2025-25990 MEDIUM 6.1 DOWNGRADE Cross Site Scripting vulnerability in hooskcms v.1.7.1 allows a remote attacker to obtain sensitive informatio
- CVE-2025-25988 MEDIUM 4.8 DOWNGRADE Cross Site Scripting vulnerability in hooskcms v.1.8 allows a remote attacker to cause a denial of service via
- CVE-2024-51055 MEDIUM 6.5 DOWNGRADE An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.ph
FAQ
How do I fix hoosk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hoosk being exploited right now?
None of the tracked hoosk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hoosk CVE should I patch first?
CVE-2024-51055 currently ranks highest (40/100): An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.ph.