Vendors / AntSwordProject Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now AntSwordProject records in CISA KEV No AntSwordProject vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
CVSS 3.1 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01154 · Published 2020-10-26 · No fix listed CWE-79
Priority MEDIUM 40
AntSword is a cross-platform website management toolkit.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0026 · Published 2026-05-12 · Fixed in 2.1.16 CWE-1188
Priority LOW 31
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01874 · Published 2019-07-19 · Fixed in 2.1.0 CWE-79
Priority LOW 30
AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0133 · Published 2020-10-26 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 2 0 0
THREATIST.IORead the docs