Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
TI-2022-26418 CVE-2022-50966 · GHSA-rj7r-ggq8-mgg9

uBidAuction 2.0.1 news manage Reflected XSS

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
TI-2022-26417 CVE-2022-50965 · GHSA-927g-3vw7-pr2p

uBidAuction 2.0.1 posts manage Reflected XSS

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79
Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00247 Published 2026-05-10 No fix listed CWE-79
TI-2022-26414 CVE-2022-50962 · GHSA-hqwg-jfw9-fhgp

uBidAuction 2.0.1 myOrders Reflected XSS

Priority MEDIUM 56

uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00252 Published 2026-05-10 No fix listed CWE-79