Valine Security Vulnerabilities and Issues — Valine CVE List

Lucene search

Valine.jsValine

2 matches found

CVE•added 2022/09/19 11:15 p.m.•51 views

CVE-2022-38545

Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.

9.6CVSS9.7AI score0.25024EPSS

CVE•added 2022/04/05 4:15 p.m.•39 views

CVE-2020-28847

Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.

5.4CVSS5.2AI score0.00181EPSS