Read the docs

FactorJS

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

FactorJS records in CISA KEV

No FactorJS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Factor 4 records HIGH Darwin 3 records LOW

Records

4 records in Factor · all components

TI-2021-07990 CVE-2021-25984 · GHSA-fjhf-p3hr-pvv7

FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality

Priority MEDIUM 60

In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting (XSS) at the “post reply” section.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00714 Published 2021-11-16 No fix listed CWE-79
TI-2021-07988 CVE-2021-25982 · GHSA-fxff-28gh-86mj

FactorJS - Reflected Cross-Site Scripting (XSS) in Search Functionality

Priority MEDIUM 60

In Factor (App Framework & Headless CMS) forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “search” parameter in the URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00757 Published 2021-11-16 No fix listed CWE-79
Open these records in search →