thirty bees

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

thirty bees records in CISA KEV

No thirty bees vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Thirty Bees 2 records LOW Bees Blog 1 record LOW

Records

2 records in Thirty Bees · all components

TI-2023-24673 CVE-2023-45958 · GHSA-4j8p-h8p2-rc88

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS)…

LOW 27

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2023-10-18 No fix listed CWE-79

TI-2023-24672 CVE-2023-45957 · GHSA-jjvp-fh9w-628p

A stored cross-site scripting (XSS) vulnerability in the component…

LOW 25

A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows attackers to execute arbitrary web script or HTML via $e->getMessage() error misha…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00375 Published 2023-12-22 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0