← Back

Burden

burden

Vendor: Burden Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-24589
1Burden Project
1Burden
Jun 17, 2026
Feb 15, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Burden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task param...Show more
Burden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter.Show less
CVE-2013-7137
1Burden Project
1Burden
Apr 29, 2026
Jan 26, 2014
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.