Xiuno
Xiunobbs: vulnerabilidades y CVE
Xiunobbs tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-19914 | Media (6.1) | 0.72% | — | 7 sept 2022 | Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function. |
| CVE-2020-21496 | Media (6.1) | 0.69% | — | 4 oct 2021 | A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter. |
| CVE-2020-21495 | Media (6.1) | 0.69% | — | 4 oct 2021 | A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter. |
| CVE-2020-21494 | Media (6.1) | 0.69% | — | 4 oct 2021 | A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0. |
| CVE-2020-21493 | Media (5.3) | 1.00% | — | 4 oct 2021 | An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames. |
| CVE-2019-19998 | Alta (7.5) | 1.1% | — | 26 dic 2019 | Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php. |
| CVE-2018-15559 | Media (6.1) | 0.67% | — | 20 ago 2018 | The editor in Xiuno BBS 4.0.4 allows stored XSS. |