Cherrytree Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cherrytree Project records in CISA KEV

No Cherrytree Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cherrytree 1 record LOW

Records

1 record in Cherrytree · all components

TI-2022-15853 CVE-2022-35133 · GHSA-x2hc-mh8w-2vp2

A cross-site scripting (XSS) vulnerability in CherryTree v0.99.30 allows attackers to…

LOW 28

A cross-site scripting (XSS) vulnerability in CherryTree v0.99.30 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field when creating a node.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00522 Published 2022-08-17 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0