mindstellar

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

mindstellar records in CISA KEV

No mindstellar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Osclass 1 record HIGH

Records

2 records

TI-2024-18289 CVE-2024-27515 · GHSA-f7mh-qr2g-w8j6

Osclass 5.1.2 is vulnerable to SQL Injection.

HIGH 67

Osclass 5.1.2 is vulnerable to SQL Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00611 Published 2024-02-28 No fix listed CWE-89

TI-2026-67390 CVE-2026-104479 · GHSA-3gwr-hcgg-p3rv

Shopclass before 6.2.0 Stored XSS via Listing Description Field

LOW 22

Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users to inject scripts into item listing descriptions when frontend TinyMCE is enabled.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00169 Published 2026-10-02 Fixed in 6.2.0 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0