VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403.511 vulnerabilities · 1.767 actively exploited (CISA KEV)

spotweb ✕Clear filters

10 results

ID	Severity	Summary	Published
CVE-2021-43725	MITTEL6.1	There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the data[performredirect] parameter.	28/03/2022
CVE-2021-33966	MITTEL5.4	Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page.	21/01/2022
CVE-2021-40973	MITTEL6.1	Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter.	01/10/2021
CVE-2021-40972