TI-2025-00342 CVE-2025-0424 · GHSA-2q28-4cjj-rh65
Multiple Authenticated Stored Cross-Site Scripting
Priority LOW 24
In the "bestinformed Web" application, some user input was not properly sanitized.
Vulnerabilities
3 records
Advisory: Cordaware bestinformed Web — cordaware.com/changelog/en/version-6_4_0_4-release-13_02_20… Clear all filters
TI-2025-00341 CVE-2025-0423 · GHSA-wrr8-9vrv-c2gc
Multiple Unauthenticated Stored Cross-Site Scripting
Priority LOW 25
In the "bestinformed Web" application, some user input was not properly sanitized.
TI-2025-00340 CVE-2025-0422 · GHSA-g7h2-8p35-f7hj
Authenticated Remote Code Execution via ScriptVar
Priority MEDIUM 41
An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application.