Ashan Perera vulnerabilities
7 vulnerabilities
Known vulnerabilities in Ashan Perera products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2CVE-2025-47494ashan pereraeventon+1
EPSS score0.77%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File Inclusion.This issue affects EventON: from n/a through <= 2.4.1.CVE-2025-48116ashan pereraeventon+1EPSS score0.34%
Missing Authorization vulnerability in Ashan Perera EventON eventon-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: from n/a through <= 2.4.4.CVE-2025-53337ashan pereralifepress+1EPSS score0.22%
Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LifePress: from n/a through <= 2.1.3.CVE-2025-32614ashan pereraeventon+1EPSS score1.88%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File Inclusion.This issue affects EventON: from n/a through <= 2.4.CVE-2025-32160ashan pereraeventon+1EPSS score0.82%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON eventon-lite.This issue affects EventON: from n/a through <= 2.4.1.CVE-2026-24563ashan pereralifepress+1EPSS score0.22%
Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LifePress: from n/a through <= 2.2.1.CVE-2026-81791ashan pereraeventon+1EPSS score0.22%
Subscriber Cross Site Scripting (XSS) in EventON <= 2.5.7 versions.