Vulnerabilities > Mindskip

DATE CVE VULNERABILITY TITLE RISK
2022-10-17 CVE-2022-41431 Cross-site Scripting vulnerability in Mindskip XZS 3.8.0
xzs v3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /admin/question/edit.
network
low complexity
mindskip CWE-79
5.4
2022-01-25 CVE-2021-46086 Incorrect Default Permissions vulnerability in Mindskip Xzs-Mysql T3.4.0
xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions.
network
low complexity
mindskip CWE-276
5.0