Webasyst

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-27517 Feb 29, 01:44 MEDIUM POC This Month

Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Webasyst

NVD GitHub

CVSS 3.1

5.4

EPSS

0.4%

CVE-2014-8377 Oct 21, 15:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP XSS Shop Script Webasyst

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2024-27517

EPSS 0% CVSS 5.4

MEDIUM POC This Month

XSS Webasyst

NVD GitHub

CVE-2014-8377

EPSS 0% CVSS 4.3

MEDIUM POC This Month

PHP XSS Shop Script +1

NVD