Vulnerabilities
3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2022-43119 | A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected in A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter. NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — | |
| CVE-2021-27310 +1 in the same advisory: …27309 | Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter. Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter. NVD description · AI analysis pending | 6.1 | 3% | PoC |
| — |