Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mdempfle — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting mdempfle. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mdempfle develops enterprise software solutions for data management and analytics, serving organizations requiring secure information processing. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. While no major public security incidents have been documented, the 10 CVEs attributed to mdempfle highlight recurring issues in their security posture, particularly in web application components and API endpoints. Their codebase typically requires regular patching to address authentication bypasses and information disclosure risks, emphasizing the need for continuous security validation in environments handling sensitive data.

Top products by mdempfle: Advanced iFrame
CVE ID Title CVSS Severity Published
CVE-2026-6742 Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute — Advanced iFrame CWE-79 6.4 Medium 2026-07-08
CVE-2026-25453 WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability — Advanced iFrame CWE-79 6.5 Medium 2026-02-19
CVE-2025-8089 Advanced iFrame <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting — Advanced iFrame CWE-79 5.4 Medium 2025-08-16
CVE-2025-6987 Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting — Advanced iFrame CWE-79 6.4 Medium 2025-07-26
CVE-2025-1440 Advanced iFrame <= 2024.5 - Unauthenticated Settings Update — Advanced iFrame CWE-20 5.3 Medium 2025-03-26
CVE-2025-1437 Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting — Advanced iFrame CWE-79 6.4 Medium 2025-03-26
CVE-2025-1439 Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header — Advanced iFrame CWE-79 6.4 Medium 2025-03-26
CVE-2024-4365 Advanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting — Advanced iFrame CWE-79 6.4 Medium 2024-05-23
CVE-2024-1341 Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting — Advanced iFrame CWE-79 4.9 Medium 2024-02-29
CVE-2023-7069 Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting — Advanced iFrame CWE-79 6.4 Medium 2024-02-01
CVE-2023-4775 Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Advanced iFrame CWE-79 6.4 Medium 2023-11-13

This page lists every published CVE security advisory associated with mdempfle. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.