Read the docs

kostasmitroglou

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

kostasmitroglou records in CISA KEV

No kostasmitroglou vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Thesystem · all components

Priority HIGH 81

thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the run_command endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.09316 Published 2026-02-20 No fix listed CWE-78
TI-2019-15365 CVE-2019-25311 · GHSA-9qqr-wpm4-gqc3

thesystem Persistent XSS

Priority MEDIUM 56

thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00249 Published 2026-02-11 No fix listed CWE-79
Open these records in search →