Read the docs

uBidAuction

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

uBidAuction records in CISA KEV

No uBidAuction vulnerabilities are listed in CISA KEV.

Records

8 records

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
TI-2022-26418 CVE-2022-50966 · GHSA-rj7r-ggq8-mgg9

uBidAuction 2.0.1 news manage Reflected XSS

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
TI-2022-26417 CVE-2022-50965 · GHSA-927g-3vw7-pr2p

uBidAuction 2.0.1 posts manage Reflected XSS

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00247 Published 2026-05-10 No fix listed CWE-79
TI-2022-26414 CVE-2022-50962 · GHSA-hqwg-jfw9-fhgp

uBidAuction 2.0.1 myOrders Reflected XSS

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Open these records in search →