Vendorscsphereclansphere2011.4
Vulnerabilities

csphere Clansphere 2011.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-27310
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.
Published 2021-03-23 · Modified
6.1EPSS 0.028
CVE-2021-27309
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.
Published 2021-03-23 · Modified
6.1EPSS 0.020
CVE-2022-43119
A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter.
Published 2022-11-09 · Modified
6.1EPSS 0.005
CVE-2014-100010
Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php.
Published 2015-01-13 · Modified
4.3EPSS 0.012