Lucene search

K
RageframeRageframe

5 matches found

CVE
CVE
added 2022/08/16 1:15 p.m.52 views

CVE-2022-36530

An issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent related parameters of the info.php page.

6.1CVSS5.9AI score0.00296EPSS
CVE
CVE
added 2024/04/11 5:15 a.m.50 views

CVE-2024-30878

A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the upload_drive parameter.

6.1CVSS5.9AI score0.00174EPSS
CVE
CVE
added 2024/04/11 5:15 a.m.49 views

CVE-2024-30880

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function.

5.4CVSS6AI score0.00085EPSS
CVE
CVE
added 2024/04/11 5:15 a.m.35 views

CVE-2024-30879

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the boxId parameter in the image cropping function.

6.1CVSS6AI score0.00091EPSS
CVE
CVE
added 2024/04/11 5:15 a.m.33 views

CVE-2024-30883

Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the aspectRatio parameter in the image cropping function.

4.7CVSS6AI score0.00062EPSS