Skip to content

Vendor

StratonWebDesigners vulnerabilities

1 published CVE affecting StratonWebDesigners, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of StratonWebDesigners alerts

Products

Latest StratonWebDesigners CVEs

Newest publication first

  1. CVE-2026-45336 HireFlow: Use of Hard-coded Credentials

    Published
    CriticalCVSS 10.0 EPSS 0.56%

    HireFlow is a web-based interview management system for managing candidates, scheduling interviews, and tracking hiring progress. In 1.2 and earlier, app.py assigns a hard-coded Flask secret_key used to sign session cookies, allowing unauthenticated attackers who know the public...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.