Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-09-01	CVE-2023-40969	Server-Side Request Forgery (SSRF) vulnerability in Slims Senayan Library Management System 9.6.1 Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/pop_p2p.php. network low complexity slims CWE-918	6.1
2022-11-01	CVE-2022-43361	Cross-site Scripting vulnerability in Slims Senayan Library Management System 9.4.2 Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.php. network low complexity slims CWE-79	4.8
2022-09-12	CVE-2022-38291	Cross-site Scripting vulnerability in Slims Senayan Library Management System 9.4.2 SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Search function. network low complexity slims CWE-79	6.1
2022-03-17	CVE-2021-45792	Cross-site Scripting vulnerability in Slims Senayan Library Management System 9.4.2 Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php. network low complexity slims CWE-79	4.8