craftedweb project records
2 published records for vendor craftedweb project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2018-12919No exploit | In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.craftedweb project · craftedweb · CWE-79 | Medium6.1 | — | 0.7% | Jun 27, 2018 |
24Monitor | CVE-2018-16450No exploit | CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.craftedweb project · craftedweb · CWE-79 | Medium6.1 | — | 0.6% | Sep 4, 2018 |
- CVE-2018-1291924Monitor
In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.
MediumCVSS 6.1No exploitEPSS 0%craftedweb project · craftedwebJun 27, 2018
- CVE-2018-1645024Monitor
CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.
MediumCVSS 6.1No exploitEPSS 0%craftedweb project · craftedwebSep 4, 2018