Vulnerabilities

TI-2025-40384 CVE-2025-65519 · GHSA-f2fg-5m3g-hqwv

mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in…

MEDIUM 62

mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00335 Published 2026-02-18 No fix listed CWE-674

TI-2024-37958 CVE-2024-57604 · GHSA-mpg8-8x9c-p9gv

HIGH 82

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00736 Published 2025-02-12 No fix listed CWE-276

TI-2024-37957 CVE-2024-57603 · GHSA-772m-773g-qmhc

MEDIUM 61

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00446 Published 2025-02-12 No fix listed CWE-799