Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Rageframe Component: Rageframe Clear all filters
TI-2024-20380 CVE-2024-30883 · GHSA-gvq9-2m65-mcj6

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote…

Priority MEDIUM 55

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the aspectRa…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0049 Published 2024-04-11 No fix listed CWE-79
TI-2024-20379 CVE-2024-30880 · GHSA-8jrf-cjx8-q3g8

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote…

Priority MEDIUM 58

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00411 Published 2024-04-11 No fix listed CWE-79
TI-2024-20378 CVE-2024-30879 · GHSA-v7v6-3chw-vv8j

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote…

Priority LOW 28

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the boxId pa…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00439 Published 2024-04-11 No fix listed CWE-79
TI-2024-20377 CVE-2024-30878 · GHSA-mq99-924g-fq3x

A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers…

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the upload_drive par…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00408 Published 2024-04-11 No fix listed CWE-94