Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

kitae-park — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting kitae-park. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates vulnerability data for the vendor kitae-park, focusing on software weaknesses and associated security tags. The collection encompasses a wide spectrum of reported flaws, ranging from memory corruption and logic errors to authentication bypasses, covering advisories published over the last decade. Readers can utilize this resource to track the vendor's official security advisories, analyze the prevalence of specific weakness classes within their ecosystem, or review the complete vulnerability history of individual products. By consolidating disparate reports into a single view, the page facilitates efficient security assessments and historical analysis for researchers and defenders. The data reflects the evolution of security issues identified in kitae-park solutions, enabling users to identify recurring patterns and assess the maturity of the vendor's patch management processes. This centralized repository supports informed decision-making regarding risk mitigation and helps organizations prioritize remediation efforts based on the severity and impact of disclosed defects. All entries are indexed to ensure rapid retrieval and cross-referencing with broader threat intelligence feeds.

Top products by kitae-park: Mang Board Mang Board WP
CVE ID Title CVSS Severity Published
CVE-2026-109998 Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAX — Mang Board CWE-79 7.2 High 2026-10-16
CVE-2026-109512 Mang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' Parameter — Mang Board CWE-79 6.4 Medium 2026-10-16
CVE-2026-109219 Mang Board <= 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter — Mang Board CWE-434 9.8 Critical 2026-10-16
CVE-2026-88043 Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter — Mang Board CWE-79 7.2 High 2026-10-15
CVE-2026-104909 Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter — Mang Board CWE-98 8.1 High 2026-10-14
CVE-2026-104761 Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter — Mang Board CWE-79 6.4 Medium 2026-10-14
CVE-2026-107751 Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter — Mang Board CWE-79 7.2 High 2026-10-14
CVE-2026-96871 Mang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' Parameter — Mang Board CWE-79 7.2 High 2026-10-02
CVE-2026-75977 Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie — Mang Board WP CWE-269 8.8 High 2026-08-26
CVE-2026-13334 Mang Board WP <= 2.3.4 - Reflected Cross-Site Scripting via 'stag' Parameter — Mang Board WP CWE-79 6.1 Medium 2026-07-09
CVE-2025-12193 Mang Board WP <= 2.3.1 - Reflected Cross-Site Scripting — Mang Board WP CWE-79 6.1 Medium 2025-11-08
CVE-2025-3435 MangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And Footer — Mang Board WP CWE-79 4.4 Medium 2025-04-24

This page lists every published CVE security advisory associated with kitae-park. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.