Vulnerabilities

TI-2026-65019 CVE-2026-100881 · GHSA-ggjh-h4r9-78xg

zhistaredu StarTraining application.yml cross site scripting

MEDIUM 44

A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1.

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00179 Published 2026-09-27 No fix listed CWE-79

TI-2026-65018 CVE-2026-100880 · GHSA-vmwc-7v5f-ffp7

MEDIUM 56

A weakness has been identified in zhistaredu StarTraining up to 3.8.1.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00191 Published 2026-09-27 No fix listed CWE-79

TI-2026-65017 CVE-2026-100879 · GHSA-jhvq-wcgv-25hr

MEDIUM 57

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0024 Published 2026-09-27 No fix listed CWE-862

TI-2026-65016 CVE-2026-100878 · GHSA-mfp5-mpmc-79q6

MEDIUM 57

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00211 Published 2026-09-27 No fix listed CWE-285

TI-2026-64288 CVE-2026-97879 · GHSA-6ffj-pvxh-v3c2

HIGH 70

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00394 Published 2026-09-25 No fix listed CWE-287

TI-2026-64287 CVE-2026-97878 · GHSA-fx9p-h435-5gfw

HIGH 70

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00383 Published 2026-09-25 No fix listed CWE-287

TI-2026-64286 CVE-2026-97877 · GHSA-6m2v-j56x-7jj6

HIGH 70

A vulnerability was determined in zhistaredu StarTraining up to 3.8.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00278 Published 2026-09-25 No fix listed CWE-255