Browse all 3 CVE security advisories affecting mekshq. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Mekshq develops security testing tools with a core focus on identifying vulnerabilities in web applications and APIs. Historically, their products have commonly detected remote code execution, cross-site scripting, and privilege escalation flaws. The platform emphasizes automated scanning capabilities with integration into CI/CD pipelines. While no major public security incidents have been reported, the three CVEs associated with the tool relate to improper input validation and insufficient access controls in its own interface, highlighting the importance of securing security tools themselves. Their approach prioritizes comprehensive coverage of OWASP Top 10 vulnerabilities with detailed remediation guidance.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-9206 | Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting — Meks Easy MapsCWE-79 | 6.4 | Medium | 2025-10-03 |
| CVE-2024-6599 | Meks Video Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) API Keys Modification — Meks Video ImporterCWE-862 | 4.3 | Medium | 2024-07-18 |
| CVE-2024-0664 | Meks Smart Social Widget <= 1.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting — Meks Smart Social WidgetCWE-79 | 4.4 | Medium | 2024-01-27 |
This page lists every published CVE security advisory associated with mekshq. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.