Known vulnerabilities in Online News Portal

Vendor: sourcecodester
Software: Online News Portal
Software CPE: cpe:2.3:a:sourcecodester:online_news_portal:*:*:*:*:*:*:*:*
Website: https://www.sourcecodester.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Online News Portal Online News Portal is affected by 9 known vulnerabilities: 1 high, 8 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51654 - Cross-Site Request Forgery (CSRF)
 CWE-352 Low
No
No
 - 23.03.2021 SB2021032311
#VU51653 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 23.03.2021 SB2021032311
#VU51652 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 23.03.2021 SB2021032311
#VU51651 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 23.03.2021 SB2021032311
#VU51650 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 23.03.2021 SB2021032311
#VU51649 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 23.03.2021 SB2021032311
#VU51648 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 23.03.2021 SB2021032311
#VU51647 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 - 23.03.2021 SB2021032311
#VU51646 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 High
No
No
 - 23.03.2021 SB2021032311