Lucene search
+L

46 matches found

CVE
CVE
•added 2025/02/11 10:47 p.m.•117 views

CVE-2025-25203

CVE-2025-25203 affects CtrlPanel (open-source billing software). The XSS vulnerability exists in the TicketsController and Moderation/TicketsController due to insufficient input validation on the priority field during ticket creation and unsafe rendering of this field in the moderator panel. Vers...

8.1CVSS7.2AI score0.00441EPSS
SaveExploits0References2
Mend
Mend
•added 2025/02/11 10:47 p.m.•9 views

CVE-2025-25203

CtrlPanel is open-source billing software for hosting providers. Prior to version 1.0, a Cross-Site Scripting XSS vulnerability exists in the "TicketsController" and "Moderation/TicketsController" due to insufficient input validation on the "priority" field during ticket creation and unsafe...

8.6CVSS0.00441EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/02/11 10:47 p.m.•43 views

CVE-2025-25203 Ctrlpanel has stored XSS vulnerability in TicketsController priority field

CtrlPanel is open-source billing software for hosting providers. Prior to version 1.0, a Cross-Site Scripting XSS vulnerability exists in the TicketsController and Moderation/TicketsController due to insufficient input validation on the priority field during ticket creation and unsafe rendering o...

8.1CVSS0.00441EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/11 12:00 a.m.•19 views

CtrlPanel-gg Cross-site Scripting Vulnerability

CtrlPanel-gg is an easy-to-use and free billing solution from CtrlPanel-gg open source. A cross-site scripting vulnerability exists in versions of CtrlPanel-gg prior to 1.0 that stems from insufficient input validation of the Priority field during the creation of a work order and insecure renderi...

8.1CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/11 12:00 a.m.•8 views

PT-2025-6412

Name of the Vulnerable Software and Affected Versions CtrlPanel versions prior to 1.0 Description A Cross-Site Scripting XSS issue exists due to insufficient input validation on the priority field during ticket creation and unsafe rendering of this field in the moderator panel, specifically in th...

8.1CVSS0.00441EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/11 12:00 a.m.•11 views

CVE-2025-25203: Improper Neutralization of Input During Web Page Generation

CtrlPanel is open-source billing software for hosting providers. Prior to version 1.0, a Cross-Site Scripting XSS vulnerability exists in the TicketsController and Moderation/TicketsController due to insufficient input validation on the priority field during ticket creation and unsafe rendering o...

8.1CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Rows per page
Query Builder