Search vulnerabilities

Results 3

Export CSV
CVE-2014-1223

Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2018-16235

Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2012-1903

XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products