← Back

Cyclos

cyclos

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Cyclos
cyclos
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-31674
1Cyclos
1Cyclos
Jul 9, 2026
May 2, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant.
CVE-2021-31673
1Cyclos
1Cyclos
Jul 9, 2026
May 2, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter.