Smartcars 3

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-33780 MEDIUM POC This Month

A stored cross-site scripting (XSS) vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the body. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Smartcars 3

NVD GitHub

CVSS 3.1

5.4

EPSS

0.5%

CVE-2023-28441 HIGH This Week

smartCARS 3 is flight tracking software. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Smartcars 3

NVD GitHub

CVSS 3.1

7.5

EPSS

0.4%

CVE-2023-33780

EPSS 0% CVSS 5.4

MEDIUM POC This Month

XSS Smartcars 3

NVD GitHub

CVE-2023-28441

EPSS 0% CVSS 7.5

HIGH This Week

smartCARS 3 is flight tracking software. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Smartcars 3

NVD GitHub