Filtered by vendor Uatech Subscriptions
Filtered by product Badaso Subscriptions
Total 7 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-38974 1 Uatech 1 Badaso 2024-11-21 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter.
CVE-2023-38973 1 Uatech 1 Badaso 2024-11-21 5.4 Medium
A stored cross-site scripting (XSS) vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter.
CVE-2023-38971 1 Uatech 1 Badaso 2024-11-21 5.4 Medium
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function.
CVE-2023-38970 1 Uatech 1 Badaso 2024-11-21 5.4 Medium
Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the Name of member parameter in the add new member function.
CVE-2023-38969 1 Uatech 1 Badaso 2024-11-21 5.4 Medium
Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter in the new book and edit book function.
CVE-2022-41711 1 Uatech 1 Badaso 2024-11-21 9.8 Critical
Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.
CVE-2022-41705 1 Uatech 1 Badaso 2024-11-21 9.8 Critical
Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.