← Back

Openpne

openpne

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Openpne
1Optimelineplugin
Jun 17, 2026
Mar 6, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitra...Show more
OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users.Show less
1Openpne
1Opopensocialplugin
Nov 21, 2024
Feb 7, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities