Skip to content

Vendor

sickrage vulnerabilities

3 published CVES affecting sickrage, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of sickrage alerts

Products

Latest sickrage CVEs

Newest publication first

  1. CVE-2021-25925 Cross-site scripting in SiCKRAGE

    Published
    MediumCVSS 5.4 EPSS 0.66%

    in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a us...

  2. CVE-2021-25926 Cross-site scripting in sickrage

    Published
    MediumCVSS 6.1 EPSS 0.82%

    In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the quicksearch feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.