Codetipi - vulnerabilities (CVEs)

3 CVEs in 3 products, 0 in the last 30 days, newest from 2026-02-19.

Products

• 15zine - 1 CVEs
• Valenti - 1 CVEs
• Valenti Engine - 1 CVEs

Newest CVEs of Codetipi

• CVE-2026-23544 - CVSS 8.8 (high), 2026-02-19: Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects Valenti: from n/a through <= 5.6.3.5.
• CVE-2025-63021 - CVSS 6.5 (medium), 2025-12-31: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codetipi Valenti Engine valenti-engine allows DOM-Based…
• CVE-2020-36510 - CVSS 6.1 (medium), 2022-02-28: The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action,…