Jorani Project Jorani
2 CVEs affecting Jorani Project Jorani. Latest disclosed: 2018-09-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15918 | Medium | 5.4 | 2018-09-05 | An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive informat… |
CVE-2018-15917 | Medium | 5.4 | 2018-09-05 | Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the language parameter to sessio… |