Browse all 3 CVE security advisories affecting deepakkite. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Deepakkite develops web applications with a core focus on enterprise content management systems. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. The three CVEs associated with their software highlight persistent issues in authentication mechanisms and insecure default configurations. While no major public security incidents have been documented, the consistent pattern of vulnerabilities suggests a need for strengthened security development practices across their product line.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-13799 | User Private Files – File Upload & Download Manager with Secure File Sharing <= 2.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting — File Sharing & Download Manager – User Private FilesCWE-79 | 6.4 | Medium | 2025-02-19 |
| CVE-2024-7848 | User Private Files <= 2.1.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private File Access — File Sharing & Download Manager – User Private FilesCWE-639 | 4.3 | Medium | 2024-08-22 |
| CVE-2023-4636 | WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting — File Sharing & Download Manager – User Private FilesCWE-79 | 4.4 | Medium | 2023-09-05 |
This page lists every published CVE security advisory associated with deepakkite. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.