Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: neos Clear all filters
TI-2022-12628 CVE-2022-30429 · GHSA-7m9h-v68w-pfw3

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the…

Priority LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace tit…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2022-06-02 Fixed in 4.4.0, 5.3.10 +5 CWE-79
TI-2021-12365 CVE-2021-32697 · GHSA-m5vx-8chx-qvmm

Form validation can be skipped

Priority LOW 31

neos/forms is an open source framework to build web forms.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01124 Published 2021-06-21 Fixed in 4.3.3, 5.0.9 +1 CWE-20