Smashing Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Smashing Project records in CISA KEV

No Smashing Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Smashing · all components

TI-2021-14201 CVE-2021-35440 · GHSA-254j-mmc5-qhpx

LOW 29

Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00995 Published 2021-07-06 Fixed in 1.3.5 CWE-79