Client Portal

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-38476 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Client Portal

NVD

CVSS 3.1

4.8

EPSS

0.3%

CVE-2023-25968 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal - Private user pages and login plugin <= 1.1.8 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Client Portal

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-38476

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Client Portal

NVD

CVE-2023-25968

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Client Portal

NVD