Vulnerabilities > Cleancoder

DATE CVE VULNERABILITY TITLE RISK
2024-11-15 CVE-2024-39610 Cross-site Scripting vulnerability in Cleancoder Fitnesse
Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026.
network
low complexity
cleancoder CWE-79
6.1
2024-03-18 CVE-2024-23604 Unspecified vulnerability in Cleancoder Fitnesse
Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with specially crafted multiple parameters.
network
low complexity
cleancoder
6.1
2024-03-18 CVE-2024-28128 Unspecified vulnerability in Cleancoder Fitnesse
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.
network
low complexity
cleancoder
6.1