Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
uBidAuction records in CISA KEVNo uBidAuction vulnerabilities are listed in CISA KEV.
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2026-05-10 · No fix listed CWE-79
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2026-05-10 · No fix listed CWE-79
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2026-05-10 · No fix listed CWE-79
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2026-05-10 · No fix listed CWE-79
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2026-05-10 · No fix listed CWE-79
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2026-05-10 · No fix listed CWE-79
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00247 · Published 2026-05-10 · No fix listed CWE-79
Priority MEDIUM 56
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00252 · Published 2026-05-10 · No fix listed CWE-79
Open these records in search →