← Back

Antsword Project

antsword_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Antsword
antsword
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-18766
1Antsword Project
1Antsword
Jun 17, 2026
Oct 26, 2020
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
CVE-2020-25470
1Antsword Project
1Antsword
Jun 17, 2026
Oct 26, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.
CVE-2019-13970
1Antsword Project
1Antsword
Jun 17, 2026
Jul 19, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/asp/index.js, modules/database/custom/index.js, modules/database/index.js, or modules/database/php/index.js.