Vulnerabilities

TI-2023-11936 CVE-2023-27121 · GHSA-x6r4-f94j-335g

A cross-site scripting (XSS) vulnerability in the component…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.22716 Published 2023-10-04 No fix listed CWE-79

TI-2017-12961 CVE-2017-17708 · GHSA-qhmh-x535-r77m

Because of insufficient authorization checks it is possible for any authenticated user to…

LOW 21

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00584 Published 2018-07-31 No fix listed CWE-863

TI-2017-12960 CVE-2017-17707 · GHSA-2cmj-fj8p-q47f

Due to missing authorization checks, any authenticated user is able to list, upload, or…

LOW 37

Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleasant Password Server before 7.8.3.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.00836 Published 2018-07-31 No fix listed CWE-862

Vulnerabilities

Filters

A cross-site scripting (XSS) vulnerability in the component…

Because of insufficient authorization checks it is possible for any authenticated user to…

Due to missing authorization checks, any authenticated user is able to list, upload, or…