Vulnerabilities (CVE)

Filtered by vendor Newsbee Project Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-5687 1 Newsbee Project 1 Newsbee 2024-02-04 3.5 LOW 4.8 MEDIUM
NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php.
CVE-2017-5971 1 Newsbee Project 1 Newsbee 2024-02-04 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands.