Read the docs

Loomio

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Loomio records in CISA KEV

No Loomio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Loomio 2 records HIGH

Records

2 records in Loomio · all components

TI-2024-01207 CVE-2024-1297 · GHSA-vx8g-76pm-2x2x

Loomio 2.22.0 - Code injection

Priority HIGH 82

Loomio version 2.22.0 allows executing arbitrary commands on the server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02733 Published 2024-02-19 No fix listed CWE-78
TI-2017-08588 CVE-2017-11594 · GHSA-4xrx-wj8f-wj3f

Cross-site scripting (XSS) vulnerability in the Markdown parser in Loomio before 1.8.0…

Priority LOW 27

Cross-site scripting (XSS) vulnerability in the Markdown parser in Loomio before 1.8.0 allows remote attackers to inject arbitrary web script or HTML via non-sanitized Markdown content in a new thread or a thread comment…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01189 Published 2017-07-24 No fix listed CWE-79
Open these records in search →