Vendors / Steve Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Steve records in CISA KEV No Steve vulnerabilities are listed in CISA KEV.
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Canalplan canalplan-ac allows Reflected XSS.This issue affects Canalplan: from n/a through <= 5.31.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00393 · Published 2025-03-03 · No fix listed CWE-79
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar availability allows Stored XSS.This issue affects Availability Calendar: from n/a through <= 0.2.4.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00139 · Published 2025-04-24 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 2 0 0 0
