Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Sickrage Clear all filters
TI-2021-07935 CVE-2021-25925 · GHSA-rmp7-f2vp-3rq4

Cross-site scripting in sickrage

Priority MEDIUM 58

in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0066 Published 2021-04-12 Fixed in 10.0.11.dev2 CWE-79
TI-2021-07936 CVE-2021-25926 · GHSA-x823-j7c4-vpc5

Cross-site scripting in sickrage

Priority MEDIUM 60

In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0082 Published 2021-04-12 Fixed in 10.0.11.dev2 CWE-79