Davidguva Openvidreview
2 CVEs affecting Davidguva Openvidreview. Latest disclosed: 2024-11-27. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-46054 | Critical | 9.8 | 2024-11-27 | OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files. |
CVE-2024-46055 | Medium | 4.8 | 2024-11-27 | OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS) in review names. |