Liveaction

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Liveaction records in CISA KEV

No Liveaction vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-10262 CVE-2023-24721 · GHSA-whfc-j75v-mxjv

MEDIUM 60

A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00447 Published 2023-04-10 No fix listed CWE-79

TI-2023-12408 CVE-2023-27775 · GHSA-p55q-52qh-qh6h

MEDIUM 58

A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a crafted payload.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00521 Published 2023-04-12 No fix listed CWE-79