Vendors / jitbit Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now jitbit records in CISA KEV No jitbit vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter.
CVSS 3.0 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04807 · Published 2019-08-09 · No fix listed CWE-332
Priority LOW 25
A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00648 · Published 2019-11-01 · No fix listed CWE-79
Priority LOW 24
HtmlSanitizer is a client-side HTML Sanitizer.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00404 · Published 2025-03-14 · Fixed in 2.0.3 CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
