Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: neos Component: Neos Cms Clear all filters
TI-2022-12628 CVE-2022-30429 · GHSA-7m9h-v68w-pfw3

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the…

Priority LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace tit…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2022-06-02 Fixed in 4.4.0, 5.3.10 +5 CWE-79