← Back

Craftedweb

craftedweb

Vendor: Craftedweb Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-16450
1Craftedweb Project
1Craftedweb
Nov 21, 2024
Sep 4, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
CraftedWeb through 2013-09-24 has reflected XSS via the p parameter.
CVE-2018-12919
1Craftedweb Project
1Craftedweb
Nov 21, 2024
Jun 27, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.