Vulnerabilities

TI-2020-19283 CVE-2020-37148 · GHSA-6gjm-f2rv-4hwc

P5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS)

MEDIUM 56

P5 FNIP-8x16A/FNIP-4xSH versions 1.0.20 and 1.0.11 suffer from a stored cross-site scripting vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0028 Published 2026-02-05 No fix listed CWE-79

TI-2020-19253 CVE-2020-37118 · GHSA-8vgp-ghqg-22mg

P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)

MEDIUM 56

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user interaction.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00167 Published 2026-02-05 No fix listed CWE-352

TI-2020-19041 CVE-2020-36906 · GHSA-m4m5-3487-v4p4

P5 FNIP-8x16A FNIP-4xSH 1.0.20 Cross-Site Request Forgery via User Management

MEDIUM 57

P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00165 Published 2026-01-06 No fix listed CWE-352

Vulnerabilities

Filters

P5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS)

P5 FNIP-8x16A FNIP-4xSH 1.0.20 - Cross-Site Request Forgery (Add Admin)

P5 FNIP-8x16A FNIP-4xSH 1.0.20 Cross-Site Request Forgery via User Management