F
Vendor security profile
froxlor
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs28
Critical5
CISA KEV0
Public exploit13
Patch rate%18
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
6
18
4
CVE KEV
CVE severity distribution
28toplam CVE
Critical5 (18%)
High16 (57%)
Medium7 (25%)
Patch and exploitation view
%18
Verified patch
%0
CISA KEV
%46
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
23Unknown
Latest vulnerabilities
5.3
CVE-2026-109963
Froxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.php
F
Patch status unknown
5.3
CVE-2026-109962
Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs API
F
Patch status unknown
8.4
CVE-2026-109961
Froxlor 0.10.0 before 2.3.14 Newline Injection via Ftps.add additional_members
F
Patch status unknown
8.7
CVE-2026-109960
Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value
F
Patch status unknown
9.3
CVE-2026-100720
Froxlor before 2.3.12 Stored XSS via SSL certificate issuer
F
Patch status unknownEPSS %0
7.1
CVE-2026-100719
Froxlor before 2.3.12 Credential Disclosure via DirProtections API
F
Patch status unknownEPSS %0
7.1
CVE-2026-100718
Froxlor before 2.3.12 Authentication Bypass via EmailSender.add
F
Patch status unknownEPSS %0
8.5
CVE-2026-100717
froxlor before 2.3.12 CRLF Injection via validateUrl userinfo
F
Patch status unknownEPSS %0
9.4
CVE-2026-100716
Froxlor before 2.3.12 Privilege Escalation via Symlink
F
Patch status unknownEPSS %0
8.5
CVE-2026-100715
Froxlor before 2.3.12 Arbitrary File Deletion via Symlink
F
Patch status unknownEPSS %0