Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: OPEXUS Component: Foiaxpress Clear all filters
TI-2025-38322 CVE-2025-61999 · GHSA-jqf6-37m4-hq4m

OPEXUS FOIAXpress stored XSS via logo image

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79
TI-2025-38321 CVE-2025-61998 · GHSA-7349-vxjx-69mh

OPEXUS FOIAXpress stored XSS via Hyperlink Manager

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79
TI-2025-38320 CVE-2025-61997 · GHSA-9m7h-pc4q-w67m

OPEXUS FOIAXpress stored XSS via banner image

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Enterprise Banner image upload field.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79
TI-2025-38319 CVE-2025-61996 · GHSA-r5fq-j3c2-575m

OPEXUS FOIAXpress stored XSS via annual report template

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79