Vulnerabilities > Minical > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-06-05 CVE-2023-33408 Cross-site Scripting vulnerability in Minical 1.0.0
Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS).
network
low complexity
minical CWE-79
5.4
5.4
2023-06-05 CVE-2023-33409 Cross-Site Request Forgery (CSRF) vulnerability in Minical 1.0.0
Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php.
network
low complexity
minical CWE-352
6.5
6.5