Sploitus

23 exploited vulnerabilities in Freshrss

Vulnerabilities with publicly known exploits

Vendors
Freshrss
With known exploits
23
Affected Freshrss versions
= 1.11.1

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2025-68932
CVSS 9.8 CRITICAL 2025-12-26FIX AVAILABLE
CVE-2025-54875
CVSS 9.8 CRITICAL 2025-09-29FIX AVAILABLE
CVE-2025-54592
CVSS 9.8 CRITICAL 2025-09-29FIX AVAILABLE
CVE-2025-58173
CVSS 8.8 HIGH 2025-12-15FIX AVAILABLE
CVE-2025-68402
CVSS 8.2 HIGH 2026-03-09FIX AVAILABLE
CVE-2025-62166
CVSS 7.5 HIGH 2026-03-09FIX AVAILABLE
CVE-2025-68148
CVSS 7.5 HIGH 2025-12-26FIX AVAILABLE
CVE-2025-54591
CVSS 7.5 HIGH 2025-09-29FIX AVAILABLE
CVE-2025-31134
CVSS 7.5 HIGH 2025-06-04FIX AVAILABLE
CVE-2025-54593
CVSS 7.2 HIGH 2025-08-01FIX AVAILABLE
CVE-2025-46341
CVSS 7.1 HIGH 2025-06-04FIX AVAILABLE
CVE-2025-61586
CVSS 6.9 MEDIUM 2025-09-29FIX AVAILABLE
CVE-2025-59950
CVSS 6.7 MEDIUM 2025-09-29FIX AVAILABLE
CVE-2025-59948
CVSS 6.7 MEDIUM 2025-09-29FIX AVAILABLE
CVE-2025-32015
CVSS 6.7 MEDIUM 2025-06-04FIX AVAILABLE
CVE-2025-31136
CVSS 6.7 MEDIUM 2025-06-04FIX AVAILABLE
CVE-2025-59949
CVSS 6.5 MEDIUM 2025-12-18FIX AVAILABLE
CVE-2022-23497
CVSS 6.5 MEDIUM 2022-12-09FIX AVAILABLE
CVE-2025-57769
CVSS 6.1 MEDIUM 2025-09-29FIX AVAILABLE
CVE-2018-19782 4 exploits
CVSS 6.1 MEDIUM 2019-01-29FIX AVAILABLE
FreshRSS 1.11.1 - Cross-Site Scripting VulnerabilityFreshRSS 1.11.1 - Cross-Site Scripting
CVE-2025-46339
CVSS 4.3 MEDIUM 2025-06-04FIX AVAILABLE
CVE-2025-31482
CVSS 4.3 MEDIUM 2025-06-04FIX AVAILABLE
CVE-2023-22481
CVSS 4.0 MEDIUM 2023-03-06