Easyxdm

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-27739 MEDIUM This Month

easyXDM 2.5 allows XSS via the xdm_e parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Easyxdm

NVD

CVSS 3.1

6.1

EPSS

0.2%

CVE-2014-1403 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in name.html in easyXDM before 2.4.19 allows remote attackers to inject arbitrary web script or HTML via the location.hash value. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Easyxdm

NVD GitHub

CVSS 2.0

4.3

EPSS

0.8%

CVE-2023-27739

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Easyxdm

NVD

CVE-2014-1403

EPSS 1% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Easyxdm

NVD GitHub