Onyaktech Comments PRO Project
Onyaktech Comments PRO Project Onyaktech Comments PRO: vulnerabilidades y CVE
Onyaktech Comments PRO Project Onyaktech Comments PRO tiene 2 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE2
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-33484 | Alta (7.5) | 0.89% | — | 7 sept 2021 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the installer, decompile it, and discover a hardcoded IV used to encrypt the username and userid in the… |
| CVE-2021-33483 | Media (5.4) | 0.62% | — | 7 sept 2021 | An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows an attacker to add an XSS payload to the JSON request that will execute when users visit the page… |