mineweb

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

mineweb records in CISA KEV

No mineweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Minewebcms 2 records LOW

Records

2 records in Minewebcms · all components

TI-2022-01052 CVE-2022-1163 · GHSA-373r-w77v-hm72

Cross-site Scripting (XSS) - Stored in mineweb/minewebcms

LOW 28

Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.03506 Published 2022-03-30 Fixed in next CWE-79

TI-2020-13437 CVE-2020-18693 · GHSA-g8f4-5372-mfh9

Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute…

LOW 26

Cross Site Scripting (XSS) in MineWebCMS v1.7.0 allows remote attackers to execute arbitrary code by injecting malicious code into the 'Title' field of the component '/admin/news'.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0099 Published 2021-08-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0