Sencha

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-8046 Jul 05, 20:29 MEDIUM This Month

The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Ext Js Sencha

NVD

CVSS 3.0

6.1

EPSS

67.0%

CVE-2018-3717 Jun 07, 02:29 npm MEDIUM POC PATCH This Month

connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Connect Sencha

NVD GitHub

CVSS 3.1

5.4

EPSS

1.3%

CVE-2018-8046

EPSS 67% CVSS 6.1

MEDIUM This Month

XSS Ext Js Sencha

NVD

CVE-2018-3717 npm

EPSS 1% CVSS 5.4

MEDIUM POC PATCH This Month

XSS Connect Sencha

NVD GitHub