Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Onethird Clear all filters
TI-2017-01428 CVE-2017-2124 · GHSA-h4gx-6x2p-3vvh

Cross-site scripting in SpiQe Software OneThird CMS

Priority LOW 30

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01146 Published 2017-04-28 No fix listed CWE-79
TI-2017-01427 CVE-2017-2123 · GHSA-cvj5-vv5v-wm45

Cross-site scripting in SpiQe Software OneThird CMS

Priority LOW 30

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-04-28 No fix listed CWE-79