Vulnerabilities

TI-2024-18117 CVE-2024-27278 · GHSA-57cq-mhwv-qcfq

Cross-site scripting in OpenPNE Plugin "opTimelinePlugin"

LOW 24

OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0034 Published 2024-03-05 No fix listed CWE-79

TI-2013-03798 CVE-2013-4335 · GHSA-vw92-xm46-h5hv

MEDIUM 47

opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02459 Published 2020-02-07 No fix listed CWE-776

TI-2013-03796 CVE-2013-4333 · GHSA-9xp4-mq53-c534

MEDIUM 44

OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02226 Published 2020-01-24 No fix listed CWE-611