Read the docs

Xiebruce

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Xiebruce records in CISA KEV

No Xiebruce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Picuploader 2 records MEDIUM

Records

2 records in Picuploader · all components

TI-2024-29995 CVE-2024-44794 · GHSA-cwhx-w267-r8qh

A cross-site scripting (XSS) vulnerability in the component…

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00295 Published 2024-08-26 No fix listed CWE-79
TI-2024-29997 CVE-2024-44796 · GHSA-m5j8-89q3-q39q

A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of…

Priority LOW 37

A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error_de…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00399 Published 2024-08-26 No fix listed CWE-79
Open these records in search →