Ips Community Suite Security Vulnerabilities and Issues — Ips Community Suite CVE List

Lucene search

InvisioncommunityIps Community Suite

2 matches found

CVE•added 2021/01/08 7:15 a.m.•83 views

CVE-2021-3025

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).

8.8CVSS9AI score0.00482EPSS

CVE•added 2021/01/05 11:15 p.m.•57 views

CVE-2021-3026

Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment.

6.1CVSS6AI score0.00359EPSS