Vulnerabilities in ledgersmb

5 results

CVE-2021-3693HIGHCross-site Scripting (XSS) - DOM in ledgersmb/ledgersmbEPSS 3.2%CVE-2021-3694HIGHCross-site Scripting (XSS) - Reflected in ledgersmb/ledgersmbEPSS 2.5%CVE-2021-3731MEDIUMImproper Restriction of Rendered UI Layers or Frames in ledgersmb/ledgersmbEPSS 1.2%CVE-2021-3882MEDIUMSensitive Cookie in HTTPS Session Without 'Secure' Attribute in ledgersmb/ledgersmbEPSS 1.1%CVE-2024-23831HIGHPrivilege escalation through CSRF attack on 'setup.pl'EPSS 0.3%