Latte

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-21648 Jan 04, 20:15 PHP MEDIUM PATCH This Month

Latte is an open source template engine for PHP. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Latte Nette

NVD GitHub

CVSS 3.1

6.1

EPSS

0.8%

CVE-2021-23803 Dec 17, 20:15 PHP CRITICAL POC PATCH Act Now

This affects the package latte/latte before 2.10.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Latte Nette

NVD GitHub

CVSS 3.1

9.8

EPSS

1.6%

CVE-2022-21648 PHP

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

XSS Latte Nette

NVD GitHub

CVE-2021-23803 PHP

EPSS 2% CVSS 9.8

CRITICAL POC PATCH Act Now

Authentication Bypass Latte Nette

NVD GitHub