Vulnerabilities

Summary — last 7 days

New vulnerabilities2,567▼ 333 vs. last week
Critical / high1,341▲ 75 vs. last week
New active exploitation (KEV)6▼ 5 vs. last week
Unscored (no CVSS)93▼ 434 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (4.3)1.1%—Script-fun Sf-shoutbox11/14/20076/16/2026
Multiple cross-site scripting (XSS) vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) nick (aka Name) and (2) shout (aka Shout) parameters.