DoWISP

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

DoWISP records in CISA KEV

No DoWISP vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-02789 CVE-2025-3189 · GHSA-7rf4-33cq-hww8

OS command injection in DoWISP

LOW 22

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the upload of a profile picture in SVG format with malicious Javascript code in it.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00399 Published 2025-04-04 Fixed in 1.16.2.50 CWE-78

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0