Vulnerabilities in star7th

35 results
Vexday analysis

A star7th apresenta 35 vulnerabilidades catalogadas, das quais 7 são críticas (CVSS ≥9.0), mas nenhuma sob ataque ativo registrado até o momento. A fraqueza dominante é Cross-Site Scripting (CWE-79), padrão em aplicações web, com apenas 1 CVE publicado nos últimos 90 dias, sugerindo ritmo moderado de descobertas. O risco atual é contido, porém requer monitoramento contínuo dada a prevalência de vulnerabilidades web.

CVE-2021-4172MEDIUMCross-site Scripting (XSS) - Stored in star7th/showdocEPSS 0.6%CVE-2022-0938HIGHStored XSS via file upload in star7th/showdocEPSS 0.6%CVE-2022-0950MEDIUMUnrestricted Upload of File with Dangerous Type in star7th/showdocEPSS 0.6%CVE-2022-0941HIGHStored XSS due to Unrestricted File Upload in star7th/showdocEPSS 0.6%CVE-2021-4168MEDIUMCross-Site Request Forgery (CSRF) in star7th/showdocEPSS 0.6%CVE-2021-4017HIGHCross-Site Request Forgery (CSRF) in star7th/showdocEPSS 0.6%CVE-2022-0940MEDIUMStored XSS due to Unrestricted File Upload in star7th/showdocEPSS 0.5%CVE-2022-0937MEDIUMStored xss in showdoc through file upload in star7th/showdocEPSS 0.5%CVE-2022-0966MEDIUMStored XSS via File Upload in star7th/showdoc in star7th/showdocEPSS 0.5%CVE-2021-3993MEDIUMCross-Site Request Forgery (CSRF) in star7th/showdocEPSS 0.5%CVE-2021-3680MEDIUMMissing Cryptographic Step in star7th/showdocEPSS 0.5%CVE-2021-3775MEDIUMCross-Site Request Forgery (CSRF) in star7th/showdocEPSS 0.4%CVE-2021-3776MEDIUMCross-Site Request Forgery (CSRF) in star7th/showdocEPSS 0.4%CVE-2021-3683MEDIUMCross-Site Request Forgery (CSRF) in star7th/showdocEPSS 0.4%CVE-2026-6982MEDIUMstar7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injectionEPSS 0.2%