Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Phpscriptsmall records in CISA KEVNo Phpscriptsmall vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 77
Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating URL parameters.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00483 · Published 2026-04-05 · No fix listed CWE-79
Open these records in search →