Goodlayers Core

Goodlayers Core has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Improper Privilege Management.

Every one of the 4 issues recorded for Goodlayers Core has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Goodlayers Core vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-12163

Goodlayers Core <= 2.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG Upload

Read the full analysis

Vulnerability Records

4 records


2025-09-23 00:00	Goodlayers Core < 2.1.7 - Authenticated (Contributor+) Privilege Escalation Goodlayers Core < 2.1.7	`CVE-2025-59580`	4.3 Medium	Bonds	Yes
2025-01-09 00:00	Goodlayers Core <= 2.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG Upload Goodlayers Core <= 2.1.2	`CVE-2024-12163`	6.4 Medium	Amine SAJID	Yes
2025-01-02 00:00	Goodlayers Core <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Goodlayers Core <= 2.0.9	`CVE-2024-11357`	6.4 Medium	Bob Matyas	Yes
2024-12-02 00:00	Goodlayers Core <= 2.0.7 - Reflected Cross-Site Scripting via 'font-family' Goodlayers Core <= 2.0.7	`CVE-2024-11200`	6.1 Medium	mike harris (mikeyh)	Yes

Showing 1–4 of 4 reports