Vendors / Syguestbook A5 Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Syguestbook A5 Project records in CISA KEV No Syguestbook A5 Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00669 · Published 2019-07-18 · No fix listed CWE-352
Priority LOW 26
index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00702 · Published 2019-07-18 · No fix listed CWE-79
Priority LOW 26
SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00702 · Published 2019-07-18 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
