Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

24 records

Vendor: skygroup Clear all filters
TI-2026-20473 CVE-2026-25355 · GHSA-jr46-fhq7-fhhc

WordPress Sanzo theme < 2.4.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Sanzo sanzo allows Stored XSS.This issue affects Sanzo: from n/a through < 2.4.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00162 Published 2026-03-25 No fix listed CWE-79
TI-2026-21750 CVE-2026-27332 · GHSA-78vq-r95r-q892

WordPress Agrofood theme < 1.4.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: from n/a through < 1.4.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2026-03-05 No fix listed CWE-79
TI-2025-37086 CVE-2025-59556 · GHSA-mh3j-f688-h5r4

WordPress GoStore theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-06 No fix listed CWE-79
TI-2025-36608 CVE-2025-58964 · GHSA-hwg2-j439-r9qp

WordPress Enzy theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-06 No fix listed CWE-79
TI-2025-30622 CVE-2025-48296 · GHSA-9fjr-gh9p-pr6w

WordPress UpStore <= 1.7.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through <= 1.7.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00235 Published 2025-08-20 No fix listed CWE-79
TI-2025-33900 CVE-2025-54055 · GHSA-57mp-8p63-vwmg

WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through <= 1.5.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00185 Published 2025-08-20 No fix listed CWE-79
TI-2024-27785 CVE-2024-41726 · GHSA-vh6h-g733-6v5h

Path traversal in SKYSEA Client View

Priority LOW 36

Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00624 Published 2024-07-29 No fix listed CWE-22
TI-2024-27493 CVE-2024-41143 · GHSA-4pmw-7j2g-cfp7

Origin validation error in SKYSEA Client View

Priority LOW 33

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00117 Published 2024-07-29 No fix listed CWE-346
TI-2024-14484 CVE-2024-21805 · GHSA-7rf7-fr54-x6c7

Improper access control in SKYSEA Client View

Priority LOW 36

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2024-03-12 No fix listed CWE-284
TI-2023-20480 CVE-2023-39341 · GHSA-39xp-m58q-6r58

Improper handling of exceptional conditions in FFRI yarai

Priority LOW 16

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00289 Published 2023-08-09 No fix listed CWE-755
TI-2021-03843 CVE-2021-20616 · GHSA-qrhf-q88m-c43r

Uncontrolled search path in SKYSEA Client View

Priority LOW 34

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00325 Published 2021-01-13 No fix listed CWE-427
TI-2020-04586 CVE-2020-5617 · GHSA-wwjw-pff4-pg5g

Improper privilege management in SKYSEA Client View

Priority LOW 34

Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges and modify/obtain sensitive information or perform unintended operations via unsp…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00339 Published 2020-08-04 No fix listed CWE-269
TI-2016-06585 CVE-2016-7836 · GHSA-6gc8-5v43-5g2x

Improper authentication in SKYSEA Client View

Priority CRITICAL 100KEV

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1923 Published 2017-06-09 No fix listed CWE-287