Xiao5ucompany Project Xiao5ucompany
2 CVEs affecting Xiao5ucompany Project Xiao5ucompany. Latest disclosed: 2018-08-06. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14960 | High | 8.8 | 2018-08-06 | Xiao5uCompany 1.7 has CSRF via admin/Admin.asp. |
CVE-2018-14527 | Medium | 6.1 | 2018-07-23 | Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example, it considers SCRIPT and IMG elements… |