Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: LocalServer Component: Localserver Clear all filters
TI-2024-09534 CVE-2024-10289 · GHSA-pg7p-x8w5-g8fp

Cross-Site Scripting (XSS) vulnerability in LocalServer

Priority LOW 27

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscript…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00302 Published 2024-10-23 No fix listed CWE-79
TI-2024-09533 CVE-2024-10288 · GHSA-5pcc-gcm6-5j87

Cross-Site Scripting (XSS) vulnerability in LocalServer

Priority LOW 27

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00302 Published 2024-10-23 No fix listed CWE-79
TI-2024-09532 CVE-2024-10287 · GHSA-7hp9-3wcj-g689

Cross-Site Scripting (XSS) vulnerability in LocalServer

Priority LOW 27

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword,…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00302 Published 2024-10-23 No fix listed CWE-79
TI-2024-09531 CVE-2024-10286 · GHSA-q6h2-p7mg-mcvj

Cross-Site Scripting (XSS) vulnerability in LocalServer

Priority LOW 27

Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php,…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00302 Published 2024-10-23 No fix listed CWE-79