askbot vulnerabilities

Products

• askbot 3

Latest askbot CVEs

Newest publication first

1. CVE-2015-3169 Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.

   Published 2017-09-07

   Medium·CVSS 6.1

   Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.

2. CVE-2014-2236 Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) tag or (2) user search forms.

   Published 2014-03-05

   Medium·CVSS 4.3

   Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) tag or (2) user search forms.

3. CVE-2014-2235 Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form.

   Published 2014-03-05

   Medium·CVSS 4.3

   Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.