Lucene search
+L

20 matches found

RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•16 views

CVE-2025-50007

Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through = 1.2.9.4...

8.8CVSS5.4AI score0.00471EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:16 p.m.•10 views

CVE-2025-50006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through = 1.2.9.4...

7.1CVSS5.4AI score0.00274EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:16 p.m.•11 views

CVE-2025-54002

Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through = 1.2.9.4...

6.5CVSS5.4AI score0.00324EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:15 p.m.•10 views

CVE-2025-50006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through = 1.2.9.4...

7.1CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:15 p.m.•12 views

CVE-2025-54002

Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through = 1.2.9.4...

6.5CVSS0.00324EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:15 p.m.•15 views

CVE-2025-50007

Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through = 1.2.9.4...

8.8CVSS0.00471EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:51 p.m.•7 views

CVE-2025-54002

Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through = 1.2.9.4...

8.8CVSS5.3AI score0.00324EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/22 4:51 p.m.•3 views

CVE-2025-50006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through = 1.2.9.4...

6.1CVSS5.3AI score0.00274EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/22 4:51 p.m.•5 views

CVE-2025-50007

Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through = 1.2.9.4...

8.8CVSS5.3AI score0.00471EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•0 views

CVE-2025-50007: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through = 1.2.9.4...

8.8CVSS5.8AI score0.00471EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•15 views

PT-2026-3982

Name of the Vulnerable Software and Affected Versions Jthemes xSmart versions through 1.2.9.4 Description A flaw exists in Jthemes xSmart that allows for Reflected Cross-Site Scripting XSS. This issue arises from improper handling of user-supplied input during web page generation. The vulnerabili...

5.3AI score0.00274EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•40 views

PT-2026-3987

Name of the Vulnerable Software and Affected Versions Jthemes xSmart versions through 1.2.9.4 Description An issue exists in Jthemes xSmart related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of access control...

5.3AI score0.00324EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•18 views

PT-2026-3983

Name of the Vulnerable Software and Affected Versions Jthemes xSmart versions through 1.2.9.4 Description An incorrect privilege assignment exists in Jthemes xSmart, potentially allowing privilege escalation. Recommendations Update Jthemes xSmart to a version later than 1.2.9.4...

5.3AI score0.00471EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•0 views

CVE-2025-50006: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through = 1.2.9.4...

7.1CVSS5.8AI score0.00274EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•1 views

CVE-2025-54002: Missing Authorization

Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through = 1.2.9.4...

6.5CVSS5.9AI score0.00324EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/28 2:38 a.m.•18 views

CVE-2025-62936

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through = 1.2.9.4...

4.3CVSS6.6AI score0.00261EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/27 3:30 a.m.•17 views

EUVD-2025-36005

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through = 1.2.9.4...

6AI score0.00261EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/27 2:15 a.m.•16 views

CVE-2025-62936

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through = 1.2.9.4...

4.3CVSS0.00261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•27 views

PT-2025-43812

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through = 1.2.9.4...

6.1CVSS6.6AI score0.00261EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•1 views

CVE-2025-62936: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through = 1.2.9.4...

4.3CVSS5.8AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder