Holded

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Holded records in CISA KEV

No Holded vulnerabilities are listed in CISA KEV.

2 records

TI-2025-00914 CVE-2025-1076 · GHSA-hg2p-7794-g6x3

LOW 21

A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00223 Published 2025-02-06 No fix listed CWE-79

TI-2024-03755 CVE-2024-4026 · GHSA-pm7v-mjff-mxvv

LOW 21

Cross-Site Scripting (XSS) vulnerability in the Holded application.

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00289 Published 2024-04-22 Fixed in 4.20.0 CWE-79