telligent vulnerabilities

Products

• community 2
• evolution 1

Latest telligent CVEs

Newest publication first

1. CVE-2012-1903 XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter.

   Published 2020-02-13

   Medium·CVSS 5.4 EPSS 0.55%

   XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter.

2. CVE-2018-16235 Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget.

   Published 2018-10-23

   Medium·CVSS 6.1 EPSS 0.87%

   Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget.

3. CVE-2014-1223 Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers t...

   Published 2014-02-27

   Medium·CVSS 4.3 EPSS 1.5%

   Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.