Skip to content

Vendor

Onest vulnerabilities

1 published CVE affecting Onest, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
1
Unscored
0
CISA KEV
0
Atom feed of Onest alerts

Products

Latest Onest CVEs

Newest publication first

  1. CVE-2023-3505 Onest CRM Project List 2 cross site scripting

    Published
    LowCVSS 3.5

    A vulnerability was found in Onest CRM 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/project/update/2 of the component Project List Handler. The manipulation of the argument name with the input <script>alert(1)</script> leads to cross...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.