Vulnerabilities

TI-2026-04589 CVE-2026-5254 · GHSA-hjf3-5wh2-p9qw

welovemedia FFmate Webhook AppJsonTreeView.vue cross site scripting

MEDIUM 56

A security vulnerability has been detected in welovemedia FFmate up to 2.0.15.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00248 Published 2026-04-01 No fix listed CWE-79

TI-2026-03177 CVE-2026-3682 · GHSA-g454-ff2w-gfmr

MEDIUM 57

A security vulnerability has been detected in welovemedia FFmate up to 2.0.15.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00264 Published 2026-03-07 No fix listed CWE-74

TI-2026-03176 CVE-2026-3681 · GHSA-cqv5-94xc-j855

MEDIUM 57

A weakness has been identified in welovemedia FFmate up to 2.0.15.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00254 Published 2026-03-07 No fix listed CWE-918