Itflow - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-25.

Products

• Itflow - 3 CVEs

Newest CVEs of Itflow

• CVE-2026-97735 - CVSS 8 (high), 2026-09-25: ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over SMTP from…
• CVE-2025-67081 - CVSS 4.9 (medium), 2026-01-15: An SQL injection vulnerability in Itflow through 25.06 has been identified in the "role_id" parameter when editing a profile. An attacker with admin account…
• CVE-2024-25344 - CVSS 6.1 (medium), 2024-02-26: Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code…