Read the docs

Rageframe

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Rageframe records in CISA KEV

No Rageframe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rageframe 5 records MEDIUM

Records

5 records in Rageframe · all components

TI-2024-20377 CVE-2024-30878 · GHSA-mq99-924g-fq3x

A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers…

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the upload_drive par…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00408 Published 2024-04-11 No fix listed CWE-94
TI-2024-20379 CVE-2024-30880 · GHSA-8jrf-cjx8-q3g8

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote…

Priority MEDIUM 58

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00411 Published 2024-04-11 No fix listed CWE-79
TI-2024-20380 CVE-2024-30883 · GHSA-gvq9-2m65-mcj6

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote…

Priority MEDIUM 55

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the aspectRa…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0049 Published 2024-04-11 No fix listed CWE-79
TI-2024-20378 CVE-2024-30879 · GHSA-v7v6-3chw-vv8j

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote…

Priority LOW 28

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the boxId pa…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00439 Published 2024-04-11 No fix listed CWE-79
Open these records in search →