Vendors / xnx3 Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now xnx3 records in CISA KEV No xnx3 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName param…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00966 · Published 2023-04-28 · No fix listed CWE-89
Priority HIGH 65
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
CVSS 3.1 MEDIUM 6.8· Network · High privileges · User interaction · EPSS 0.00232 · Published 2025-02-21 · No fix listed CWE-352
Priority MEDIUM 56
A vulnerability has been found in xnx3 wangmarket up to 6.4.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00251 · Published 2026-01-01 · No fix listed CWE-284
Priority MEDIUM 55
A weakness has been identified in xnx3 wangmarket up to 4.9.
CVSS 4.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0028 · Published 2026-01-05 · No fix listed CWE-79
Priority MEDIUM 55
A security flaw has been discovered in xnx3 wangmarket up to 4.9.
CVSS 4.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0028 · Published 2026-01-05 · No fix listed CWE-79
Priority MEDIUM 55
A vulnerability was found in xnx3 wangmarket up to 6.4.
CVSS 4.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00268 · Published 2026-01-01 · No fix listed CWE-79
Priority MEDIUM 44
A vulnerability was found in xnx3 wangmarket 6.1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00851 · Published 2023-12-17 · No fix listed CWE-94
Priority LOW 36
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.
CVSS 3.1 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00191 · Published 2025-02-21 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
2 1 5 0 0
THREATIST.IORead the docs