Vulnerabilities

TI-2022-13314 CVE-2022-31299 · GHSA-9cch-vm5f-45mv

Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.

LOW 35

Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05139 Published 2022-06-16 No fix listed CWE-79

TI-2022-13316 CVE-2022-31301 · GHSA-2p27-3gqf-86g7

Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.

LOW 26

Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00866 Published 2022-06-16 No fix listed CWE-79

TI-2022-13313 CVE-2022-31298 · GHSA-8wv6-rmxh-q8rm

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows…

LOW 27

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01215 Published 2022-06-16 No fix listed CWE-79

TI-2022-13315 CVE-2022-31300 · GHSA-cqgm-j5h5-6gpv

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows…

LOW 27

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01215 Published 2022-06-16 No fix listed CWE-79

Vulnerabilities

Filters

Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.

Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.

A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows…

A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows…