Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Gazelle Project Clear all filters
TI-2024-29998 CVE-2024-44797 · GHSA-hw6m-6w6g-wxq7

A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php…

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the view p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0033 Published 2024-08-26 No fix listed CWE-79
TI-2024-29996 CVE-2024-44795 · GHSA-cfq4-896j-74qc

A cross-site scripting (XSS) vulnerability in the component /login/disabled.php of…

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username paramet…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00295 Published 2024-08-26 No fix listed CWE-79
TI-2024-29994 CVE-2024-44793 · GHSA-42m4-gw8j-vjvg

A cross-site scripting (XSS) vulnerability in the component…

Priority MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /managers/multiple_freeleech.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tor…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00295 Published 2024-08-26 No fix listed CWE-79