Vendors / Moloni Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Moloni records in CISA KEV No Moloni vulnerabilities are listed in CISA KEV.
Priority LOW 31
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Moloni allows Reflected XSS.This issue affects Moloni: from n/a through 4.7.4.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00287 · Published 2024-07-20 · No fix listed CWE-79
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Moloni Contribuinte Checkout contribuinte-checkout allows Stored XSS.This issue affects Contribuinte Checkout: from n/a through <= 2.0.03.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00139 · Published 2025-05-07 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0