MediumCVSS 4.8
EPSS 0.53%
Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.
Product
answerdev github.com/answerdev/answer vulnerabilities
34 published CVES affecting answerdev github.com/answerdev/answer, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 34
- Critical
- 6
- High
- 5
- Medium
- 21
- Low
- 2
- Unscored
- 0
- CISA KEV
- 0
Latest answerdev github.com/answerdev/answer CVEs
Newest publication first · page 2 of 2
-
-
MediumCVSS 5.4 EPSS 0.44%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.
-
MediumCVSS 5.4 EPSS 0.39%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.
-
MediumCVSS 6.8 EPSS 0.69%
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitHub repository answerdev/answer prior to 1.0.4.
-
CriticalCVSS 9.0 EPSS 0.75%
Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.
-
CriticalCVSS 9.0 EPSS 0.87%
Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.
-
CriticalCVSS 9.0 EPSS 0.71%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.
-
CriticalCVSS 9.0 EPSS 0.87%
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.
-
CriticalCVSS 9.8 EPSS 6.4% Public exploit
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.