Read the docs

kubik-rubik

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

kubik-rubik records in CISA KEV

No kubik-rubik vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority LOW 31

Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/plugin_sige/print.php link with…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02186 Published 2018-02-20 No fix listed CWE-79
Priority LOW 28

The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended (SIGE) extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header o…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2018-03-05 No fix listed CWE-79
Open these records in search →