Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Froiden Clear all filters
TI-2026-15358 CVE-2026-18741 · GHSA-wf5q-9pcr-hqpg

Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

Priority LOW 21

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious pa…

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00251 Published 2026-08-13 Fixed in 6.0.14 CWE-79
TI-2026-46353 CVE-2026-64828 · GHSA-9hp2-rmjj-5mmh

Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field

Priority MEDIUM 57

Froiden TableTrack through 1.3.10 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary HTML and JavaScript through the order notes field without sanitization.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00368 Published 2026-07-22 No fix listed CWE-79