Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Aurélien LWS records in CISA KEVNo Aurélien LWS vulnerabilities are listed in CISA KEV.
Priority LOW 23
Cross-Site Request Forgery (CSRF) vulnerability in Aurélien LWS LWS SMS lws-sms allows Cross Site Request Forgery.This issue affects LWS SMS: from n/a through <= 2.4.1.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00143 · Published 2025-03-28 · No fix listed CWE-352
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Aurélien LWS LWS Affiliation lws-affiliation allows Cross Site Request Forgery.This issue affects LWS Affiliation: from n/a through <= 2.3.6.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00159 · Published 2025-09-22 · No fix listed CWE-352
