← Back

Antsword

antsword

Vendor: Antsword Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-18766
1Antsword Project
1Antsword
Jun 17, 2026
Oct 26, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
CVE-2020-25470
1Antsword Project
1Antsword
Jun 17, 2026
Oct 26, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.
CVE-2019-13970
1Antsword Project
1Antsword
Jun 17, 2026
Jul 19, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.