Vulnerabilities

TI-2020-13467 CVE-2020-18766 · GHSA-q677-wggg-h4hr

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

MEDIUM 44

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01154 Published 2020-10-26 No fix listed CWE-79

TI-2020-15566 CVE-2020-25470 · GHSA-9mhr-wj86-g462

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site…

LOW 30

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0133 Published 2020-10-26 No fix listed CWE-79

TI-2019-10419 CVE-2019-13970 · GHSA-hq75-ggc3-8h3q

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution…

LOW 31

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01874 Published 2019-07-19 Fixed in 2.1.0 CWE-79

Vulnerabilities

Filters

A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.

AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site…

In antSword before 2.1.0, self-XSS in the database configuration leads to code execution…