Vulnerabilities

TI-2025-21183 CVE-2025-29771 · GHSA-vhv4-fh94-jm5x

HtmlSanitizer vulnerable to XSS when used with contentEditable

LOW 24

HtmlSanitizer is a client-side HTML Sanitizer.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00404 Published 2025-03-14 Fixed in 2.0.3 CWE-79

TI-2019-13479 CVE-2019-18636 · GHSA-xcj4-m4h8-5fh9

A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8…

LOW 25

A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00648 Published 2019-11-01 No fix listed CWE-79

TI-2017-13659 CVE-2017-18486 · GHSA-xp26-jqrv-cc5r

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of…

LOW 39

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.04807 Published 2019-08-09 No fix listed CWE-332

Vulnerabilities

Filters

HtmlSanitizer vulnerable to XSS when used with contentEditable

A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8…

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of…