Vulnerabilities

TI-2023-24672 CVE-2023-45957 · GHSA-jjvp-fh9w-628p

A stored cross-site scripting (XSS) vulnerability in the component…

LOW 25

A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows attackers to execute arbitrary web script or HTML via $e->getMessage() error misha…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00375 Published 2023-12-22 No fix listed CWE-79

TI-2023-24673 CVE-2023-45958 · GHSA-4j8p-h8p2-rc88

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS)…

LOW 27

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2023-10-18 No fix listed CWE-79

Vulnerabilities

Filters

A stored cross-site scripting (XSS) vulnerability in the component…

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS)…