What’s Vulnerable › Products

Nextcloud Contacts vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Nextcloud Contacts version is affected

Latest Nextcloud Contacts vulnerabilities

• CVE-2025-66554 — Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title field (CVSS 5.4)
• CVE-2023-33182 — Nextcloud Contacts photos only sanitized if mime type is all lower case (CVSS 4.3)
• CVE-2021-39221 — XSS in Contacts (CVSS 5.4)
• CVE-2020-8281 — (CVSS 5.4)
• CVE-2020-8280 — (CVSS 5.4)
• CVE-2020-8181 — (CVSS 4.3)
• CVE-2018-3764 — (CVSS 4.8)