VendorsMoreliteainitiativeall versions
Vulnerabilities

Morelitea Initiative

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-28274
Initiative Vulnerable to Token Theft via Stored XSS in Document Uploads
Published 2026-02-26 · Analyzed
8.7EPSS 0.006
CVE-2026-28275
Initiative Vulnerable to Improper Session Invalidation (JWT Remains Valid)
Published 2026-02-26 · Analyzed
8.1EPSS 0.004
CVE-2026-28276
Initiative Allows Unauthenticated Access to Uploaded Documents via Public /uploads/ Endpoint
Published 2026-02-26 · Analyzed
7.5EPSS 0.006