Skygroup vulnerabilities

We track 15 vulnerabilities in Skygroup products across 14 products. 15 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.

15vulnerabilities

0critical

15high

0exploited

7.2average CVSS score

Latest Skygroup vulnerabilities

7.1 High severity
Yobazar: Improper Neutralization of Input During Web Page Generation
CVE-2026-25356Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.This issue affects Yobazar: from n/a through < 1.6.7.
7.1 High severity
Reebox: Improper Neutralization of Input During Web Page Generation
CVE-2026-25354Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through < 1.4.8.
7.1 High severity
Nooni: Improper Neutralization of Input During Web Page Generation
CVE-2026-25353Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through < 1.5.1.
7.1 High severity
MyDecor: Improper Neutralization of Input During Web Page Generation
CVE-2026-25352Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyDecor mydecor allows Reflected XSS.This issue affects MyDecor: from n/a through < 1.5.9.
7.1 High severity
MyMedi: Improper Neutralization of Input During Web Page Generation
CVE-2026-25351Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyMedi mymedi allows Reflected XSS.This issue affects MyMedi: from n/a through < 1.7.7.
7.1 High severity
Miti: Improper Neutralization of Input During Web Page Generation
CVE-2026-25350Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This issue affects Miti: from n/a through < 1.5.3.
7.1 High severity
Loobek: Improper Neutralization of Input During Web Page Generation
CVE-2026-25349Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.This issue affects Loobek: from n/a through < 1.5.2.
7.1 High severity
Jaroti: Improper Neutralization of Input During Web Page Generation
CVE-2026-25304Mar 25, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/a through < 1.4.8.
7.1 High severity
Agrofood: Improper Neutralization of Input During Web Page Generation
CVE-2026-27332Mar 5, 2026Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: from n/a through < 1.4.0.
7.1 High severity
GoStore: Improper Neutralization of Input During Web Page Generation
CVE-2025-59556Nov 6, 2025Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.
7.1 High severity
Enzy: Improper Neutralization of Input During Web Page Generation
CVE-2025-58964Nov 6, 2025Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.
7.1 High severity
Druco: Improper Neutralization of Input During Web Page Generation
CVE-2025-54055Aug 20, 2025Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through <= 1.5.2.
7.1 High severity
UpStore: Improper Neutralization of Input During Web Page Generation
CVE-2025-48296Aug 20, 2025Skygroup
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through <= 1.7.0.
7.8 High severity
SKYSEA Client View: Incorrect Privilege Assignment
CVE-2024-41139Jul 29, 2024Sky
Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary cod
7.8 High severity
SKYSEA Client View: Improper Access Control
CVE-2024-21805Mar 12, 2024Sky
Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC