hoosk CVE Vulnerabilities & Metrics

Focus on hoosk vulnerabilities and metrics.

Last updated: 08 Mar 2025, 23:25 UTC

About hoosk Security Exposure

This page consolidates all known Common Vulnerabilities and Exposures (CVEs) associated with hoosk. We track both calendar-based metrics (using fixed periods) and rolling metrics (using gliding windows) to give you a comprehensive view of security trends and risk evolution. Use these insights to assess risk and plan your patching strategy.

For a broader perspective on cybersecurity threats, explore the comprehensive list of CVEs by vendor and product. Stay updated on critical vulnerabilities affecting major software and hardware providers.

Global CVE Overview

Total hoosk CVEs: 10
Earliest CVE date: 01 Mar 2018, 22:29 UTC
Latest CVE date: 16 Nov 2022, 15:15 UTC

Latest CVE reference: CVE-2022-43234

Rolling Stats

30-day Count (Rolling): 0
365-day Count (Rolling): 0

Calendar-based Variation

Calendar-based Variation compares a fixed calendar period (e.g., this month versus the same month last year), while Rolling Growth Rate uses a continuous window (e.g., last 30 days versus the previous 30 days) to capture trends independent of calendar boundaries.

Variations & Growth

Month Variation (Calendar): 0%
Year Variation (Calendar): 0%

Month Growth Rate (30-day Rolling): 0.0%
Year Growth Rate (365-day Rolling): 0.0%

Monthly CVE Trends (current vs previous Year)

Annual CVE Trends (Last 20 Years)

Critical hoosk CVEs (CVSS ≥ 9) Over 20 Years

CVSS Stats

Average CVSS: 5.12

Max CVSS: 7.5

Critical CVEs (≥9): 0

CVSS Range vs. Count

Range Count
0.0-3.9 2
4.0-6.9 5
7.0-8.9 3
9.0-10.0 0

CVSS Distribution Chart

Top 5 Highest CVSS hoosk CVEs

These are the five CVEs with the highest CVSS scores for hoosk, sorted by severity first and recency.

All CVEs for hoosk

CVE-2022-43234 hoosk vulnerability CVSS: 0 16 Nov 2022, 15:15 UTC

An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a crafted PHP file.

CVE-2022-28586 hoosk vulnerability CVSS: 4.3 25 Apr 2022, 13:15 UTC

XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars.

CVE-2021-43478 hoosk vulnerability CVSS: 5.5 31 Mar 2022, 19:15 UTC

A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstall the website.

CVE-2020-26043 hoosk vulnerability CVSS: 4.3 30 Sep 2020, 18:15 UTC

An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php

CVE-2020-26042 hoosk vulnerability CVSS: 7.5 30 Sep 2020, 18:15 UTC

An issue was discovered in Hoosk CMS v1.8.0. There is a SQL injection vulnerability in install/index.php

CVE-2020-26041 hoosk vulnerability CVSS: 7.5 30 Sep 2020, 18:15 UTC

An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php

CVE-2020-16610 hoosk vulnerability CVSS: 4.3 28 Aug 2020, 17:15 UTC

Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Site Request Forgery (CSRF). When an attacker induces authenticated admin user to a malicious web page, any accounts can be deleted without admin user's intention.

CVE-2018-16772 hoosk vulnerability CVSS: 3.5 10 Sep 2018, 04:29 UTC

Hoosk v1.7.0 allows XSS via the Navigation Title of a new page entered at admin/pages/new.

CVE-2018-16771 hoosk vulnerability CVSS: 7.5 10 Sep 2018, 04:29 UTC

Hoosk v1.7.0 allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.

CVE-2018-7590 hoosk vulnerability CVSS: 6.8 01 Mar 2018, 22:29 UTC

CSRF exists in Hoosk 1.7.0 via /admin/users/new/add, resulting in account creation.