Laborator

laborator

5 CVEs • 3 products

Products (3)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-24075 1Laborator 1Kalium Jun 17, 2026 Aug 11, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to execute arbitrary code.
CVE-2020-23576 1Laborator 1Neon Jun 17, 2026 Aug 27, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.
CVE-2020-14010 1Laborator 1Xenon Jun 17, 2026 Jun 10, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter.
CVE-2020-13890 1Laborator 1Neon Jun 17, 2026 Jun 6, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.
CVE-2019-20141 1Laborator 1Neon Jun 17, 2026 Dec 30, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.