Vvvebjs

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-29272 npm MEDIUM POC PATCH This Month

Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE PHP File Upload Vvvebjs

NVD GitHub

CVSS 3.1

6.5

EPSS

9.4%

CVE-2024-29271 npm MEDIUM POC PATCH This Month

Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE PHP XSS Vvvebjs

NVD GitHub

CVSS 3.1

6.1

EPSS

0.6%

CVE-2024-29272 npm

EPSS 9% CVSS 6.5

MEDIUM POC PATCH This Month

RCE PHP File Upload +1

NVD GitHub

CVE-2024-29271 npm

EPSS 1% CVSS 6.1

MEDIUM POC PATCH This Month

RCE PHP XSS +1

NVD GitHub