Vulnerabilidades em kitae-park
13 resultadosAnálise Vexday
O fornecedor kitae-park apresenta um perfil de risco baixo com apenas 3 vulnerabilidades registradas na base, nenhuma sob ataque ativo e sem críticas (CVSS). A fraqueza dominante é CWE-79 (cross-site scripting), indicando potencial de execução de código no navegador; destaca-se 1 vulnerabilidade publicada nos últimos 90 dias, sugerindo atividade recente de descoberta. O panorama não demonstra urgência imediata, mas recomenda-se monitoramento contínuo e priorização de patches para a vulnerabilidade recente.
CVE-2026-104909HIGHMang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' ParameterEPSS 1.0%CVE-2026-75977HIGHMang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication CookieEPSS 0.9%CVE-2026-109219CRITICALMang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' ParameterEPSS 0.7%CVE-2026-13334MEDIUMMang Board WP <= 2.3.4 - Reflected Cross-Site Scripting via 'stag' ParameterEPSS 0.4%CVE-2026-107751HIGHMang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' ParameterEPSS 0.3%CVE-2026-104761MEDIUMMang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' ParameterEPSS 0.3%CVE-2026-109998HIGHMang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter via content_reply AJAXEPSS 0.3%CVE-2026-96871HIGHMang Board <= 2.4.2 - Unauthenticated Stored Cross-Site Scripting via 'data_type' ParameterEPSS 0.2%CVE-2025-3435MEDIUMMangBoard WP <= 1.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Board Header And FooterEPSS 0.2%CVE-2025-12193MEDIUMMang Board WP <= 2.3.1 - Reflected Cross-Site ScriptingEPSS 0.2%CVE-2026-109512MEDIUMMang Board <= 2.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'content' ParameterEPSS 0.2%CVE-2026-110071MEDIUMMang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode AttributeEPSS 0.2%CVE-2026-88043HIGHMang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' ParameterEPSS 0.2%