TI-2018-06627 CVE-2018-9123 · GHSA-688p-g274-83cj
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.
Priority LOW 25
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.
Crea8social
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Crea8social records in CISA KEVNo Crea8social vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2018-06626 CVE-2018-9122 · GHSA-2vc2-4346-vqmx
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
Priority LOW 25
In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
TI-2018-06625 CVE-2018-9121 · GHSA-rmwx-6rf2-mvwm
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment.
Priority LOW 25
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment.
TI-2018-06624 CVE-2018-9120 · GHSA-gr4x-96qv-rrhg
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.
Priority LOW 25
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.
TI-2015-00949 CVE-2015-1054 · GHSA-8p9p-g5gr-m534
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game Content field in Add Game.