Sploitus

7 exploited vulnerabilities in Invision Community

Vulnerabilities with publicly known exploits

Vendors
Invision, Invision Power Services, Invision Power Systems
With known exploits
7
Affected Invisioncommunity versions
< 5.0.7, 4.7.16
Affected Invisioncommunity Ips Community Suite versions
< 4.6.0
Affected Invisioncommunity Invision Power Board versions
< 4.6.5.1
Affected Invisioncommunity Community versions
= 4.5.4

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2025-47916 6 exploits
CVSS 10.0 CRITICAL 2025-04-23FIX AVAILABLE
📄 Invision Community 5.0.6 customCss Expression InjectionExploit for Improper Neutralization of Special Elements Used in a Template Engine in Invisioncommunity
CVE-2021-32924 2 exploits
CVSS 10.0 HIGH 2021-06-01FIX AVAILABLE
IPS Community Suite 4.5.4.2 PHP Code Injection VulnerabilityIPS Community Suite 4.5.4.2 PHP Code Injection
CVE-2024-30163 2 exploits
CVSS 9.8 CRITICAL 2024-04-08FIX AVAILABLE
Invision Community 4.7.15 SQL Injection VulnerabilityInvision Community 4.7.15 SQL Injection
CVE-2021-39249
CVSS 6.1 MEDIUM 2021-08-17FIX AVAILABLE
CVE-2021-39250
CVSS 5.4 MEDIUM 2021-08-17FIX AVAILABLE
CVE-2020-29477 2 exploits
CVSS 4.8 MEDIUM 2020-12-30FIX AVAILABLE
CVE-ReferenceInvision Community 4.5.4 - 'Field Name' Stored Cross-Site Scripting
CVE-2025-48932 3 exploits
2025-07-23
Exploit for CVE-2025-48932Invision Community 4.7.20 - (calendar/view.php) SQL Injection