Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Selfbest Clear all filters
TI-2025-39306 CVE-2025-63418 · GHSA-4h7f-6q5m-3p6f

A DOM-based Cross-Site Scripting (XSS) vulnerability in the SelfBest platform 2023.3…

Priority MEDIUM 60

A DOM-based Cross-Site Scripting (XSS) vulnerability in the SelfBest platform 2023.3 allows attackers to execute arbitrary JavaScript in the context of a logged-in user's session by injecting payloads via the browser's d…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-05 No fix listed CWE-79
TI-2025-39304 CVE-2025-63416 · GHSA-7gqw-xrp6-92rg

** exclusively-hosted-service ** A Stored Cross-Site Scripting (XSS) vulnerability in the…

Priority HIGH 78

** exclusively-hosted-service ** A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest platform 2023.3 allows authenticated low-privileged attackers to execute arbitrary JavaScript i…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00392 Published 2025-11-05 No fix listed CWE-79