Cristi N L Vaque S2Member vulnerabilities
5 known vulnerabilities affecting cristi_n_l_vaque/s2member.
Total CVEs
5
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL3HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2025-62023P2CRITICALCVSS 9.0Exploited≤ 2509052025-10-22
CVE-2025-62023 [CRITICAL] CWE-94 CVE-2025-62023: Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member
Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.
nvd
CVE-2025-58998P3CRITICALCVSS 9.8≤ 2507012025-11-06
CVE-2025-58998 [CRITICAL] CWE-502 CVE-2025-58998: Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object
Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through <= 250701.
nvd
CVE-2024-51815P3CRITICALCVSS 9.0≤ 2411142024-12-06
CVE-2024-51815 [CRITICAL] CWE-94 CVE-2024-51815: Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member
Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through <= 241114.
nvd
CVE-2025-32137P4MEDIUMCVSS 4.9≤ 2504192025-04-04
CVE-2025-32137 [MEDIUM] CWE-23 CVE-2025-32137: Relative Path Traversal vulnerability in Cristián Lávaque s2Member s2member allows Path Traversal.Th
Relative Path Traversal vulnerability in Cristián Lávaque s2Member s2member allows Path Traversal.This issue affects s2Member: from n/a through <= 250419.
nvd
CVE-2025-26879P4HIGHCVSS 7.1≤ 2412162025-03-03
CVE-2025-26879 [HIGH] CWE-79 CVE-2025-26879: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristián Lávaque s2Member s2member allows Reflected XSS.This issue affects s2Member: from n/a through <= 241216.
nvd