Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Mirasvit Clear all filters
TI-2026-33054 CVE-2026-45247 · GHSA-rg8p-9rpg-r32p

Mirasvit Cache Warmer for Magento < 1.11.12 PHP Object Injection

Priority CRITICAL 99KEV

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.26157 Published 2026-05-26 Fixed in 1.11.12 CWE-502
TI-2017-10441 CVE-2017-14321 · GHSA-66xf-hmj3-jj6x

Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in…

Priority LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) customer name or (2) subj…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00603 Published 2017-09-21 No fix listed CWE-79