Filtered by vendor Openpne
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2024-27278 | 1 Openpne | 1 Optimelineplugin | 2025-03-27 | N/A | 5.4 MEDIUM |
OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users. | |||||
CVE-2013-4335 | 1 Openpne | 1 Opopensocialplugin | 2024-11-21 | 7.5 HIGH | 9.8 CRITICAL |
opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities |