Geshi Security Vulnerabilities and Issues — Geshi CVE List

Lucene search

QbnzGeshi

3 matches found

CVE•added 2025/03/09 3:15 p.m.•66 views

CVE-2025-2123

A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function get_var of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument default-styles/keywords-1/keywords-2/keywords-3/keywords-4/comme...

6.1CVSS6.4AI score0.00037EPSS

Web

CVE•added 2014/06/13 2:55 p.m.•43 views

CVE-2012-3521

Multiple directory traversal vulnerabilities in the cssgen contrib module in GeSHi before 1.0.8.11 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) geshi-path or (2) geshi-lang-path parameter.

5CVSS6.7AI score0.00866EPSS

CVE•added 2014/06/13 2:55 p.m.•37 views

CVE-2012-3522

Cross-site scripting (XSS) vulnerability in contrib/langwiz.php in GeSHi before 1.0.8.11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.5AI score0.00329EPSS