Providence

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-1825 MEDIUM POC PATCH This Month

Cross-site Scripting (XSS) - Reflected in GitHub repository collectiveaccess/providence prior to 1.8. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Providence

NVD GitHub

CVSS 3.1

5.4

EPSS

0.6%

CVE-2013-4507 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

XSS Pawtucket Providence

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2022-1825

EPSS 1% CVSS 5.4

MEDIUM POC PATCH This Month

XSS Providence

NVD GitHub

CVE-2013-4507

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

XSS Pawtucket Providence

NVD