Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Hgw168cc records in CISA KEVNo Hgw168cc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 29
YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00928 · Published 2019-09-09 · Fixed in 1.9.2 CWE-79
Open these records in search →