Supersmart Me Walk Through

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-34768 HIGH This Week

insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Supersmart Me Walk Through

NVD

CVSS 3.1

7.5

EPSS

0.4%

CVE-2022-30628 MEDIUM This Month

It was possible to download all receipts without authentication. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Supersmart Me Walk Through

NVD

CVSS 3.1

5.5

EPSS

0.2%

CVE-2022-34768

EPSS 0% CVSS 7.5

HIGH This Week

XSS Supersmart Me Walk Through

NVD

CVE-2022-30628

EPSS 0% CVSS 5.5

MEDIUM This Month

It was possible to download all receipts without authentication. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Supersmart Me Walk Through

NVD