Vulnerabilities in avo-hq

6 results

CVE-2023-34102HIGHPossible unsafe reflection / partial denial of service in avoEPSS 1.6%CVE-2024-22191HIGHStored cross-site scripting (XSS) in `key_value` field in AvoEPSS 0.7%CVE-2024-22411MEDIUMCross site scripting in Action messages on AvoEPSS 0.7%CVE-2023-34103HIGHStored XSS (Cross Site Scripting) in html content based fields of avoEPSS 0.6%CVE-2026-42205HIGHAvo: Broken Access Control: Unauthorized Execution of Arbitrary Action Classes Across ResourcesEPSS 0.3%CVE-2026-33209MEDIUMAvo has a XSS vulnerability on `return_to` paramEPSS 0.3%