Vulnerabilities in AmauriC

9 results

Vexday analysis

AmauriC apresenta footprint reduzido com 6 CVEs catalogadas e nenhuma sob exploração ativa conhecida, reduzindo o risco imediato de ataque. Nenhuma vulnerabilidade crítica foi identificada, porém 1 disclosure nos últimos 90 dias indica atividade recente que merece monitoramento contínuo. A fraqueza dominante CWE-1021 (improper restriction of rendered UI layers) sugere problemas em isolamento de componentes que podem ter impacto em segurança de camadas de interface.

CVE-2024-13888HIGHWPMobile.App <= 11.56 - Open Redirect via 'redirect' ParameterEPSS 0.7%CVE-2023-3620MEDIUMCross-site Scripting (XSS) - Stored in amauric/tarteaucitron.jsEPSS 0.5%CVE-2024-12420MEDIUMWPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.4%CVE-2025-31476MEDIUMtarteaucitron.js allows url scheme injection via unfiltered inputsEPSS 0.3%CVE-2025-31475MEDIUMtarteaucitron.js allows prototype pollution via custom text injectionEPSS 0.3%CVE-2025-31138MEDIUMtarteaucitron.js allows UI manipulation via unrestricted CSS injectionEPSS 0.3%CVE-2026-49977MEDIUMtarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookiesEPSS 0.2%CVE-2025-48939MEDIUMtarteaucitron.js vulnerable to DOM Clobbering via document.currentScriptEPSS 0.2%CVE-2026-22809MEDIUMtarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilityEPSS 0.1%