Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Credova Financial records in CISA KEVNo Credova Financial vulnerabilities are listed in CISA KEV.
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Credova Financial Credova_Financial credova-financial allows Reflected XSS.This issue affects Credova_Financial: from…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00293 · Published 2025-04-17 · No fix listed CWE-79
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Credova Financial Credova_Financial credova-financial allows Cross Site Request Forgery.This issue affects Credova_Financial: from n/a through <= 2.5.0.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00153 · Published 2025-05-07 · No fix listed CWE-352
