← Back

Canopy

canopy

Vendor: Checksec • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Checksec
1Canopy
Jun 17, 2026
Jun 18, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGIN_PAGE_DISCLAIMER parameter.
1Checksec
1Canopy
Jun 17, 2026
Jun 20, 2018
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.