boxbilling

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

boxbilling records in CISA KEV

No boxbilling vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Boxbilling 2 records HIGH

Records

2 records in Boxbilling · all components

TI-2022-03271 CVE-2022-3552 · GHSA-r3mf-wrm4-mjqq

Unrestricted Upload of File with Dangerous Type in boxbilling/boxbilling

HIGH 67

Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.44002 Published 2022-10-17 Fixed in 0.0.1 CWE-434

TI-2020-14627 CVE-2020-23647 · GHSA-7562-6p6m-r4fh

Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21…

MEDIUM 60

Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the message field on the submit new ticket form.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2023-04-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0