Read the docs

Issabel, issabel-agenda module

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Issabel, issabel-agenda module records in CISA KEV

No Issabel, issabel-agenda module vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-27117 CVE-2025-40647 · GHSA-4545-9995-wr4m

Stored Cross-Site Scripting (XSS) vulnerability in Issabel products

Priority LOW 23

Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=address_book'.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.003 Published 2025-10-01 Fixed in 5.0.0-2, 5.0.0-4 CWE-79
TI-2025-27118 CVE-2025-40648 · GHSA-2qqm-fhwf-736x

Stored Cross-Site Scripting (XSS) vulnerability in Issabel products

Priority LOW 22

Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'numero_conferencia' parameter in '/index.php?menu=conferencia'.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00314 Published 2025-10-01 Fixed in 5.0.0-2, 5.0.0-4 CWE-79
Open these records in search →