Vendors / Slims Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Slims Project records in CISA KEV No Slims Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
Reflected cross-site scripting (XSS) in SLiMS (slims9_bulian) before 9.6.0 via improper handling of $_SERVER['PHP_SELF' ] in index.php/sysconfig.inc.php, which allows remote attackers to execute arbitrary JavaScript in a…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00224 · Published 2025-12-17 · No fix listed CWE-79
Priority MEDIUM 60
SLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /customs/loan_by_class.php?reportView.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00473 · Published 2023-02-13 · No fix listed CWE-79
Priority LOW 29
Reflected Cross-Site Scripting (XSS) exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stock_take/index.php?keywords= URI.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00844 · Published 2018-06-22 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 0 3 0 0
