Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-25801

SKINsoft S-Museum 7.02.3 allows XSS via the filename of an uploaded file. Unlike in CVE-2024-25802, the attack payload is in the name (not the content) of a file.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Skinsoft
Products
S-museum
CVE-2024-25802

SKINsoft S-Museum 7.02.3 allows Unrestricted File Upload via the Add Media function. Unlike in CVE-2024-25801, the attack payload is the file content.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Skinsoft
Products
S-museum