Vulnerabilities in parorrey

3 results

CVE-2024-6624CRITICALJSON API User <= 3.9.3 - Unauthenticated Privilege EscalationEPSS 2.9%CVE-2026-97637CRITICALJSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' ResponseEPSS 0.6%CVE-2026-9626MEDIUMJSON API User <= 4.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' ParameterEPSS 0.4%