Vulnerabilities > Alist Project > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-09-30 CVE-2024-47067 Cross-site Scripting vulnerability in Alist Project Alist
AList is a file list program that supports multiple storages.
network
low complexity
alist-project CWE-79
6.1
2022-12-12 CVE-2022-45970 Cross-site Scripting vulnerability in Alist Project Alist 3.5.1
Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.
network
low complexity
alist-project CWE-79
5.4
2022-03-12 CVE-2022-26533 Cross-site Scripting vulnerability in Alist Project Alist
Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.
network
low complexity
alist-project CWE-79
6.1