Skip to content
Noroxi

webboss records

4 published records for vendor webboss.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2023-36339
    30Monitor

    An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request.

    HighCVSS 7.5No exploitEPSS 0%

    webboss · webboss.io cmsJul 21, 2023

  • CVE-2023-37742
    24Monitor

    WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.

    MediumCVSS 6.1No exploitEPSS 0%

    webboss · webboss.io cmsJul 21, 2023

  • CVE-2023-39096
    21Monitor

    WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.

    MediumCVSS 5.4No exploitEPSS 0%

    webboss · webboss.io cmsAug 3, 2023

  • CVE-2023-39097
    21Monitor

    WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.

    MediumCVSS 5.4No exploitEPSS 0%

    webboss · webboss.io cmsAug 3, 2023