Known vulnerabilities in colabrio Ohio Extra
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-32571 | Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions | 6.5 Medium | Oct 6, 2026 |
| CVE-2025-64365 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio… | 6.5 Medium | Oct 31, 2025 |
| CVE-2025-26924 | Improper Control of Generation of Code ('Code Injection') vulnerability in colabrio Ohio Extra ohio-extra allows Code… | 6.5 Medium | Mar 15, 2025 |