An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Privilege Escalation
Google
Oxygenos
Oneplus
NVD
CVSS 3.0
6.6
EPSS
0.0%
Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
XSS
Experience Platform
Sitecore
NVD
Exploit-DB
CVSS 3.0
6.1
EPSS
0.3%