Badaso vulnerabilities
4 known CVE vulnerabilities in Badaso, translated and rated.
- CVE-2023-38970Medium
Badaso versions from 0.0.1 to 2.9.7 contain a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload in the 'Name of member' parameter in the add new member function.
- CVE-2023-38971Medium
Badaso versions 0.0.1 through 2.9.7 have a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload to the rack number parameter in the add new rack function.
- CVE-2023-38974Medium
In version 2.9.7 of Badaso, there is a stored XSS vulnerability in the Edit Category function that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter.
- CVE-2023-38973Medium
In version 2.9.7 of Badaso, there is a stored XSS vulnerability in the Add Tag function that allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter.