Brandexponents vulnerabilities
We track 2 vulnerabilities in Brandexponents products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2026.
2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score
Latest Brandexponents vulnerabilities
- 8.1 High severity
Oshine: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in brandexponents Oshine allows PHP Local File Inclusion. This issue affects Oshine: from n/a before 7.3.0.
- 7.1 High severity
Oshine Modules: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandexponents Oshine Modules oshine-modules allows Reflected XSS.This issue affects Oshine Modules: from n/a through < 3.3.8.