Browse all 3 CVE security advisories affecting clevelandwebdeveloper. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Clevelandwebdeveloper specializes in web application development and maintenance, primarily serving clients with custom web solutions. Historically, their code has been associated with multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues across their client projects. The security posture has shown recurring patterns in input validation failures and improper access controls. While no major public security incidents have been documented, the three CVEs on record demonstrate consistent security weaknesses in their development practices, particularly in handling user-supplied data and implementing authentication mechanisms. Their work continues to exhibit similar vulnerability classes, suggesting systemic issues in secure coding implementation.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-13841 | Smart App Banners <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' and 'verticalalign' Shortcode Attributes — Smart App BannersCWE-79 | 6.4 | Medium | 2026-01-07 |
| CVE-2024-10527 | Spacer <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Limited Information Disclosure — SpacerCWE-862 | 3.1 | Low | 2025-01-07 |
| CVE-2024-5880 | Hide My Site <= 2.2 - Unauthenticated Information Exposure — Hide My SiteCWE-200 | 4.3 | Medium | 2024-08-21 |
This page lists every published CVE security advisory associated with clevelandwebdeveloper. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.