A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
XSS
Seacms
NVD
GitHub
CVSS 3.1
3.5
EPSS
0.3%
Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Authentication Bypass
Wab I1750 Ps Firmware
NVD
CVSS 3.1
3.7
EPSS
0.5%