pixelimity kayıtları

pixelimity üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
CWE-352 Cross-Site Request Forgery (CSRF)1
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2022-28590Kavram kanıtı	A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.pixelimity · pixelimity RCE	Yüksek7,2	—	%23,8	3 May 2022
28İzleyin	CVE-2020-23522Kavram kanıtı	Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.pixelimity · pixelimity · CWE-352 CSRF	Orta6,8	—	%2,0	19 Oca 2021
20İzleyin	CVE-2025-5206İstismar yok	Pixelimity Installation index.php sql injectionpixelimity · pixelimity · CWE-74 SQL enjeksiyonu	Orta5,1	—	%0,4	26 May 2025
19İzleyin	CVE-2018-19919İstismar yok	Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVGpixelimity · pixelimity · CWE-79 XSS	Orta4,8	—	%0,7	6 Ara 2018
19İzleyin	CVE-2022-28589İstismar yok	A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title pixelimity · pixelimity · CWE-79 RCE XSS	Orta4,8	—	%0,6	3 May 2022
19İzleyin	CVE-2021-42866İstismar yok	A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.phppixelimity · pixelimity · CWE-79 XSS	Orta4,8	—	%0,6	31 Mar 2022
19İzleyin	CVE-2021-29056İstismar yok	Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php.pixelimity · pixelimity · CWE-79 XSS	Orta4,8	—	%0,5	17 Ağu 2021

CVE-2022-28590
35İzleyin
A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.
YüksekCVSS 7,2Kavram kanıtıEPSS %24
- RCE
pixelimity · pixelimity3 May 2022
CVE-2020-23522
28İzleyin
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.
OrtaCVSS 6,8Kavram kanıtıEPSS %2
- CSRF
pixelimity · pixelimity19 Oca 2021
CVE-2025-5206
20İzleyin
Pixelimity Installation index.php sql injection
OrtaCVSS 5,1İstismar yokEPSS %0
- SQL enjeksiyonu
pixelimity · pixelimity26 May 2025
CVE-2018-19919
19İzleyin
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
pixelimity · pixelimity6 Ara 2018
CVE-2022-28589
19İzleyin
A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title
OrtaCVSS 4,8İstismar yokEPSS %1
- RCE
- XSS
pixelimity · pixelimity3 May 2022
CVE-2021-42866
19İzleyin
A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
pixelimity · pixelimity31 Mar 2022
CVE-2021-29056
19İzleyin
Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
pixelimity · pixelimity17 Ağu 2021