Kfm Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kfm Project records in CISA KEV

No Kfm Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Kfm · all components

TI-2022-19171 CVE-2022-40359 · GHSA-v2qf-2g23-xmcg

LOW 31

Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm/index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01824 Published 2022-09-23 No fix listed CWE-79