Una

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-14805 MEDIUM This Month

studio/builder_menu.php?page=sets in UNA 10.0.0-RC1 allows XSS via the System Name field under Sets during set editing. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS PHP Una

NVD GitHub

CVSS 3.0

4.8

EPSS

0.7%

CVE-2019-14804 MEDIUM POC This Month

studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS PHP Una

NVD GitHub Exploit-DB

CVSS 3.0

4.8

EPSS

2.7%

CVE-2019-14805

EPSS 1% CVSS 4.8

MEDIUM This Month

XSS PHP Una

NVD GitHub

CVE-2019-14804

EPSS 3% CVSS 4.8

MEDIUM POC This Month

XSS PHP Una

NVD GitHub Exploit-DB