Login Request a demo
IN
Product
Indexhibit
by Indexhibit · last CVE Aug 30, 2021
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 5Low 0
Severity
All severities8Critical1High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Indexhibit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-18127
6.5
1%
Aug 30
An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files
Affected: 2.1.5
CVE-2020-18123
6.5
0%
Aug 30
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts
Affected: 2.1.5
CVE-2020-18125
6.1
1%
Aug 30
A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML
Affected: 2.1.5
CVE-2020-18124
5.7
0%
Aug 30
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords
Affected: 2.1.5
CVE-2020-18126
5.4
1%
Aug 30
Multiple stored cross-site scripting (XSS) vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML
Affected: 2.1.5
Showing 5