Blog

givanz/Vvveb

Powerful and easy to use cms to build websites, blogs or ecommerce stores.

#cms#page-builder#ecommerce-platform#php#blog-platform#blog-engine#content-management#php8#shopping-cart#website-builder#php7#php-cms#backend#blogging#ecommerce#self-hosted#web-application#no-code#content-management-system#blog

スコア

/ 100

Star

1,067

Fork

196

Open Issue

143

サイズ

15MB

言語

HTML

最終push

2 日前

Docker

🐳 両方 ★

採点内訳

過去CVE 15件 (やや多い)

✓

直近 push: 2 日前

✓

得意言語 (HTML)

—

オープンissue 143件

✓

中規模 (15MB)

✓

Docker 対応 (Dockerfile + compose)

✓

1k–10k: 初心者ベスト (★1,067)

✓

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (15 件)

MEDIUMGHSA-39gc-pjv5-4w4p CVE-2026-456162026/5/13
Stored XSS in Posts allows privilege escalation via post editor
MEDIUMGHSA-3xwm-8f6m-cfc6 CVE-2026-456222026/5/13
Unauthenticated reflected XSS in public product return form via customer_order_id
HIGHGHSA-vwcx-w4fq-9769 CVE-2026-458002026/5/13
Authenticated SQL injection in /user/orders via order_by and direction
HIGHGHSA-rmh2-wv73-xpqh CVE-2026-464082026/5/13
Vvveb checkout IDOR allows unauthorized reuse of another user's cart
HIGHGHSA-5g3g-x6mf-pwr6 CVE-2026-464072026/5/13
Vvveb admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokens
HIGHGHSA-75x2-j47j-mg8j CVE-2026-448262026/5/4
Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totals
CRITICALGHSA-qpcx-gx2x-r8v2 CVE-2026-419382026/5/4
Unauthenticated Remo te Code Execution via .phtml + .htaccess Upload (Apache Deployments)
CRITICALGHSA-wwmv-4g9g-p48g CVE-2026-419292026/5/4
Unauthenticated Reflected Cross-Site Scripting via Editor Preview Bypass
CRITICALGHSA-g38h-mr9p-fjmf CVE-2026-419302026/5/4
Unauthenticated phpMyAdmin (auth_type=config) Yields Full Database Read/Write and Bcrypt Hash Dump
HIGHGHSA-xgvg-r47g-786r CVE-2026-419312026/5/4
Pre-authentication PHP Stack-Trace and Source-Code Disclosure via DEBUG=true
CRITICALGHSA-vfjj-gcvv-w248 CVE-2026-419342026/5/4
Authenticated RCE via `editor/code/save` `.htaccess` Override (Editor / Author / Contributor / Site_admin)
CRITICALGHSA-rfxr-4xpm-wrp7 CVE-2026-419362026/5/4
Authenticated XXE in `tools/import` Reaches Site_admin → Arbitrary File Read + Lateral Move to Super_admin
MEDIUMGHSA-gpmg-pcxr-9wvf CVE-2026-443662026/5/4
Stored XSS via Comment Author Field
HIGHGHSA-2vc4-49hq-g7f4 CVE-2026-443652026/4/29
Stored Cross-Site Scripting via HTML File Upload Bypass
CRITICALGHSA-5m79-v4p3-gh3f CVE-2026-344272026/4/29
Privilege Escalation to Super Administrator via Profile Save Form