Oroplatform

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-50677 Dec 06, 16:15 MEDIUM POC This Month

A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Oroplatform Oroinc

NVD GitHub

CVSS 3.1

6.1

EPSS

0.6%

CVE-2023-32062 Nov 27, 22:15 PHP MEDIUM PATCH This Month

OroPlatform is a package that assists system and user calendar management. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Microsoft Oroplatform Oroinc

NVD GitHub

CVSS 3.1

4.3

EPSS

0.5%

CVE-2024-50677

EPSS 1% CVSS 6.1

MEDIUM POC This Month

XSS Oroplatform Oroinc

NVD GitHub

CVE-2023-32062 PHP

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

OroPlatform is a package that assists system and user calendar management. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Microsoft Oroplatform +1

NVD GitHub