neos

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

neos records in CISA KEV

No neos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Neos Cms 2 records LOW Form 1 record LOW

Records

3 records

TI-2021-12365 CVE-2021-32697 · GHSA-m5vx-8chx-qvmm

Form validation can be skipped

LOW 31

neos/forms is an open source framework to build web forms.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01124 Published 2021-06-21 Fixed in 4.3.3, 5.0.9 +1 CWE-20

TI-2023-19191 CVE-2023-37611 · GHSA-6qjf-7g3j-qx25

Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated…

LOW 26

Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file to the neos/management/media component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00706 Published 2023-09-18 Fixed in 7.3.19, 8.0.16 +3 CWE-79

TI-2022-12628 CVE-2022-30429 · GHSA-7m9h-v68w-pfw3

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace tit…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2022-06-02 Fixed in 4.4.0, 5.3.10 +5 CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0