2bits

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

2bits records in CISA KEV

No 2bits vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Currency 2 records LOW Userpoints 1 record LOW

Records

2 records in Currency · all components

TI-2025-10008 CVE-2025-10930 · GHSA-27fv-rpgj-4c6m

Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

LOW 34

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00133 Published 2025-10-29 Fixed in 3.5.0 CWE-352

TI-2010-01033 CVE-2010-1074 · GHSA-893c-j9f3-gj2f

Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2…

LOW 23

Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01309 Published 2010-03-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0