Vulnerabilities > Collectiveaccess

DATE CVE VULNERABILITY TITLE RISK
2022-05-23 CVE-2022-1825 Cross-site Scripting vulnerability in Collectiveaccess Providence 1.1/1.2/1.3
Cross-site Scripting (XSS) - Reflected in GitHub repository collectiveaccess/providence prior to 1.8.
3.5
2013-11-20 CVE-2013-4507 Cross-Site Scripting vulnerability in Collectiveaccess Pawtucket and Providence
Cross-site scripting (XSS) vulnerability in CollectiveAccess Providence and Pawtucket before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3