Vulnerabilities in UserSpice

2 results
CVE-2018-25350CRITICALuserSpice 4.3.24 Username Enumeration via existingUsernameCheck.phpEPSS 0.4%CVE-2018-25349MEDIUMuserSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For HeaderEPSS 0.2%