Factorjs Factor
4 CVEs affecting Factorjs Factor. Latest disclosed: 2021-11-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25985 | High | 7.8 | 2021-11-16 | In Factor (App Framework & Headless CMS) v1.0.4 to v1.8.30, improperly invalidate a user’s session even after the user logs out of the application. In addition… |
CVE-2021-25984 | Medium | 6.1 | 2021-11-16 | In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.3 to v1.8.30, are vulnerable to stored Cross-Site Scripting (XSS) at the “post reply” sect… |
CVE-2021-25983 | Medium | 6.1 | 2021-11-16 | In Factor (App Framework & Headless CMS) forum plugin, versions v1.3.8 to v1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “tags” and “ca… |
CVE-2021-25982 | Medium | 6.1 | 2021-11-16 | In Factor (App Framework & Headless CMS) forum plugin, versions 1.3.5 to 1.8.30, are vulnerable to reflected Cross-Site Scripting (XSS) at the “search” paramet… |