Filtered by vendor Opentrade Project
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2020-6847 | 1 Opentrade Project | 1 Opentrade | 2024-11-21 | 3.5 LOW | 5.4 MEDIUM |
OpenTrade through 0.2.0 has a DOM-based XSS vulnerability that is executed when an administrator attempts to delete a message that contains JavaScript. | |||||
CVE-2019-19250 | 1 Opentrade Project | 1 Opentrade | 2024-11-21 | 7.5 HIGH | 9.8 CRITICAL |
OpenTrade before 2019-11-23 allows SQL injection, related to server/modules/api/v1.js and server/utils.js. |