Xiuno

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-19998 Dec 26, 04:15 HIGH POC This Week

Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XXE Xiunobbs Xiuno

NVD

CVSS 3.1

7.5

EPSS

1.1%

CVE-2018-15559 Aug 20, 00:29 MEDIUM POC This Month

The editor in Xiuno BBS 4.0.4 allows stored XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Xiunobbs Xiuno

NVD

CVSS 3.0

6.1

EPSS

0.7%

CVE-2019-19998

EPSS 1% CVSS 7.5

HIGH POC This Week

PHP XXE Xiunobbs +1

NVD

CVE-2018-15559

EPSS 1% CVSS 6.1

MEDIUM POC This Month

XSS Xiunobbs Xiuno

NVD