Webboss

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Webboss records in CISA KEV

No Webboss vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Webboss.io Cms · all components

TI-2023-18215 CVE-2023-36339 · GHSA-2qgf-37v8-c4jh

MEDIUM 40

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00583 Published 2023-07-21 No fix listed CWE-863

TI-2023-19249 CVE-2023-37742 · GHSA-2hwr-fcr9-mg7v

LOW 28

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00472 Published 2023-07-21 No fix listed CWE-79

TI-2023-20292 CVE-2023-39097 · GHSA-jwm5-g9ww-6h8j

LOW 24

WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00334 Published 2023-08-03 No fix listed CWE-79

TI-2023-20291 CVE-2023-39096 · GHSA-mrh9-m2j7-5cqv

LOW 24

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00334 Published 2023-08-03 No fix listed CWE-79