Vendors / Imaster Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Imaster records in CISA KEV No Imaster vulnerabilities are listed in CISA KEV.
Priority MEDIUM 48
Imaster's MEMS Events CRM contains an SQL injection vulnerability in ‘phone’ parameter in ‘/memsdemo/login.php’.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00334 · Published 2026-01-12 · No fix listed CWE-89
Priority MEDIUM 45
Imaster's Patient Records Management System is vulnerable to SQL Injection in the endpoint ‘/projects/hospital/admin/complaints.php’ through the ‘id’ parameter.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00298 · Published 2026-01-12 · No fix listed CWE-89
Priority LOW 39
Imaster's MEMS Events CRM contains an SQL injection vulnerability in‘keyword’ parameter in ‘/memsdemo/exchange_offers.php’.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00298 · Published 2026-01-12 · No fix listed CWE-89
Priority LOW 23
Imaster's Patient Record Management System contains a stored Cross-Site Scripting (XSS) vulnerability in the endpoint ‘/projects/hospital/admin/edit_patient.php’.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00273 · Published 2026-01-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 1 0 0
THREATIST.IORead the docs