Craftedweb Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Craftedweb Project records in CISA KEV

No Craftedweb Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2018-11792 CVE-2018-16450 · GHSA-4pxr-mcr4-xc64

LOW 28

CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2018-09-04 No fix listed CWE-79

TI-2018-09284 CVE-2018-12919 · GHSA-h2cf-4gc3-7wf3

LOW 28

In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00696 Published 2018-06-27 No fix listed CWE-79