Xiuno

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xiuno records in CISA KEV

No Xiuno vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xiunobbs 7 records LOW

Records

7 records

TI-2019-14425 CVE-2019-19998 · GHSA-9vpm-fw8c-289m

Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.

LOW 35

Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01104 Published 2019-12-26 No fix listed CWE-611

TI-2020-13740 CVE-2020-19914 · GHSA-px4g-wqmp-7rhq

Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary…

LOW 29

Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0074 Published 2022-09-07 No fix listed CWE-79

TI-2020-14071 CVE-2020-21496 · GHSA-m37x-h78g-g7x6

A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of…

LOW 28

A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00694 Published 2021-10-04 No fix listed CWE-79

TI-2020-14070 CVE-2020-21495 · GHSA-3hv3-jqjm-jhqf

A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of…

LOW 28

A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00694 Published 2021-10-04 No fix listed CWE-79

TI-2020-14069 CVE-2020-21494 · GHSA-hvwx-c823-vgxp

A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno…

LOW 28

A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00694 Published 2021-10-04 No fix listed CWE-79

TI-2018-11095 CVE-2018-15559 · GHSA-q778-j99q-6335

The editor in Xiuno BBS 4.0.4 allows stored XSS.

LOW 28

The editor in Xiuno BBS 4.0.4 allows stored XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00667 Published 2018-08-20 No fix listed CWE-79

TI-2020-14068 CVE-2020-21493 · GHSA-4hxw-v2j3-4qv8

An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.

LOW 26

An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00999 Published 2021-10-04 No fix listed

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	0