Vulnerabilities > Onekeyadmin > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-03-16 CVE-2023-26951 Cross-site Scripting vulnerability in Onekeyadmin 1.3.9
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.
network
low complexity
onekeyadmin CWE-79
5.4
2023-03-08 CVE-2023-26952 Cross-site Scripting vulnerability in Onekeyadmin 1.3.9
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.
network
low complexity
onekeyadmin CWE-79
5.4
2023-03-08 CVE-2023-26950 Cross-site Scripting vulnerability in Onekeyadmin 1.3.9
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module.
network
low complexity
onekeyadmin CWE-79
5.4
2023-03-07 CVE-2023-26953 Cross-site Scripting vulnerability in Onekeyadmin 1.3.9
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
network
low complexity
onekeyadmin CWE-79
4.8