Softr

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Softr records in CISA KEV

No Softr vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2022-19191 CVE-2022-40434 · GHSA-cw5r-qw3x-wgpf

HIGH 82

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01142 Published 2022-12-19 No fix listed CWE-79

TI-2022-14086 CVE-2022-32407 · GHSA-vqx5-7wv4-cx38

MEDIUM 60

Softr v2.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via the First Name parameter under the Create A New Account module.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2022-10-27 No fix listed CWE-79

TI-2022-23803 CVE-2022-48085 · GHSA-j9wr-m578-9wvj

LOW 25

Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00596 Published 2023-02-06 No fix listed CWE-79