Vulnerabilities

TI-2020-14602 CVE-2020-23576 · GHSA-h25r-hf7h-m6wv

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.

LOW 25

Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2020-08-27 No fix listed CWE-79

TI-2020-10871 CVE-2020-13890 · GHSA-h5pw-7qvg-2fpq

LOW 25

The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2020-06-06 No fix listed CWE-79

TI-2019-14519 CVE-2019-20141 · GHSA-h345-gcmh-6ppj

LOW 35

An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05008 Published 2019-12-30 No fix listed CWE-79