← Back

Xiao5ucompany

xiao5ucompany

Vendor: Xiao5ucompany Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-14960
1Xiao5ucompany Project
1Xiao5ucompany
Nov 21, 2024
Aug 6, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Xiao5uCompany 1.7 has CSRF via admin/Admin.asp.
CVE-2018-14527
1Xiao5ucompany Project
1Xiao5ucompany
Nov 21, 2024
Jul 23, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example, it considers SCRIPT and IMG elements, but does not consider VIDEO elements).