Read the docs

Quate

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Quate records in CISA KEV

No Quate vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Quate Cms · all components

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php, (2) login.php, and (3) credits.php in admin/, and (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2008-05-28 No fix listed CWE-79
Open these records in search →