Ctparental Project

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-37367 Aug 10, 17:15 HIGH This Week

CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

PHP RCE Path Traversal Ctparental Ctparental Project

NVD GitHub

CVSS 3.1

7.8

EPSS

0.5%

CVE-2021-37366 Aug 10, 17:15 HIGH This Week

CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS CSRF Ctparental Ctparental Project

NVD GitHub

CVSS 3.1

8.8

EPSS

0.5%

CVE-2021-37365 Aug 10, 17:15 MEDIUM This Month

CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS Ctparental Ctparental Project

NVD GitHub

CVSS 3.1

6.1

EPSS

0.7%

CVE-2021-37367

EPSS 1% CVSS 7.8

HIGH This Week

PHP RCE Path Traversal +2

NVD GitHub

CVE-2021-37366

EPSS 1% CVSS 8.8

HIGH This Week

XSS CSRF Ctparental +1

NVD GitHub

CVE-2021-37365

EPSS 1% CVSS 6.1

MEDIUM This Month

PHP XSS Ctparental +1

NVD GitHub