Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Data Dash data-dash allows Stored XSS.This issue affects Data Dash: from n/a through <= 1.2.3.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00274 · Published 2025-04-17 · No fix listed CWE-79
Priority LOW 28
Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through <= 1.1.4.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00346 · Published 2025-04-03 · No fix listed CWE-862
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Data Dash data-dash allows Reflected XSS.This issue affects Data Dash: from n/a through <= 1.2.3.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00281 · Published 2025-02-14 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs allows Reflected XSS.This issue affects FAQs: from n/a through <= 1.0.2.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0027 · Published 2025-01-02 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 FAQs faqs allows Stored XSS.This issue affects FAQs: from n/a through <= 1.0.2.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00385 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients clients allows Stored XSS.This issue affects Clients: from n/a through <= 1.1.4.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00408 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Easy Replace easy-replace allows Stored XSS.This issue affects Easy Replace: from n/a through <= 1.3.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0039 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Echoza echoza allows Stored XSS.This issue affects Echoza: from n/a through <= 0.1.1.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.004 · Published 2024-12-13 · No fix listed CWE-79
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Think201 Mins To Read mins-to-read allows Stored XSS.This issue affects Mins To Read: from n/a through <= 1.2.2.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00158 · Published 2024-12-02 · No fix listed CWE-352