FULL – Cliente

FULL – Cliente has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 6 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (33%). Other recurring categories include Improper Authentication, Improper Authorization.

Every one of the 6 issues recorded for FULL – Cliente has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, most of them (2) reported by Ram.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all FULL – Cliente vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-54313

FULL Customer <= 3.1.25 - Authenticated (Contributor+) Local File Inclusion

Read the full analysis

Vulnerability Records

6 records


2025-05-01 00:00	FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injection FULL <= 3.1.25	`CVE-2024-12023`	6.5 Medium	kr0d	Yes
2024-12-11 00:00	FULL Customer <= 3.1.25 - Authenticated (Contributor+) Local File Inclusion FULL <= 3.1.25	`CVE-2024-54313`	8.8 High	João Pedro Soares de Alcântara	Yes
2024-10-10 00:00	FULL – Cliente <= 3.1.22 - Reflected Cross-Site Scripting FULL <= 3.1.22	`CVE-2024-9211`	6.1 Medium	vgo0	Yes
2024-07-10 11:26	FULL <= 3.1.12 - Unauthenticated Stored Cross-Site Scripting via License Plan Parameter FULL <= 3.1.12	`CVE-2024-6447`	7.2 High	stealthcopter	Yes
2023-08-08 00:00	FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation FULL <= 2.2.3	`CVE-2023-4243`	8.8 High	Ram	Yes
2023-08-08 00:00	FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check FULL <= 2.2.3	`CVE-2023-4242`	4.3 Medium	Ram	Yes

Showing 1–6 of 6 reports