Mxgraph

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-40440 npm MEDIUM POC This Month

mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Mxgraph

NVD GitHub VulDB

CVSS 3.1

6.1

EPSS

0.7%

CVE-2019-13127 npm MEDIUM POC PATCH This Month

An issue was discovered in mxGraph through 4.0.0, related to the "draw.io Diagrams" plugin before 8.3.14 for Confluence and other products. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Atlassian XSS Draw Io Diagrams Mxgraph

NVD GitHub

CVSS 3.0

6.1

EPSS

1.5%

CVE-2022-40440 npm

EPSS 1% CVSS 6.1

MEDIUM POC This Month

XSS Mxgraph

NVD GitHub VulDB

CVE-2019-13127 npm

EPSS 2% CVSS 6.1

MEDIUM POC PATCH This Month

Atlassian XSS Draw Io Diagrams +1

NVD GitHub