Adive: >> Framework >> 2.0.8 Security Vulnerabilities
Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/nav/add, in multiple parameters. This vulnerability allows an attacker to retrieve the session details of an authenticated user.
CVSS Score
7.6
EPSS Score
0.002
Published
2024-04-30
Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripting (XSS) vulnerability via the /adive/admin/tables/add, in multiple parameters. An attacker could retrieve the session details of an authenticated user.
CVSS Score
7.6
EPSS Score
0.002
Published
2024-04-30
Adive Framework 2.0.8 has admin/user/add userUsername XSS.
CVSS Score
6.1
EPSS Score
0.003
Published
2020-01-26
Adive Framework 2.0.8 has admin/user/add userName XSS.
CVSS Score
6.1
EPSS Score
0.003
Published
2020-01-26
Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.
CVSS Score
8.8
EPSS Score
0.004
Published
2020-01-26