Groovel Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Groovel Project records in CISA KEV

No Groovel Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Cmsgroovel · all components

TI-2017-04270 CVE-2017-6480 · GHSA-4v34-gm3m-8x92

LOW 29

groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00883 Published 2017-03-05 No fix listed CWE-79