Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
thirty bees records in CISA KEVNo thirty bees vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 28
The beesblog (aka Bees Blog) component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharing_url is mishandled.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0043 · Published 2023-12-30 · No fix listed CWE-79
Open these records in search →