Laborator

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Laborator records in CISA KEV

No Laborator vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Neon · all components

TI-2019-14519 CVE-2019-20141 · GHSA-h345-gcmh-6ppj

LOW 35

An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05008 Published 2019-12-30 No fix listed CWE-79

TI-2020-14602 CVE-2020-23576 · GHSA-h25r-hf7h-m6wv

LOW 25

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2020-08-27 No fix listed CWE-79

TI-2020-10871 CVE-2020-13890 · GHSA-h5pw-7qvg-2fpq

LOW 25

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2020-06-06 No fix listed CWE-79