Vulnerabilities > Vfairs
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-05-26 | CVE-2020-26677 | SQL Injection vulnerability in Vfairs 3.3 Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API. | 6.5 |
| 2021-05-26 | CVE-2020-26678 | Unrestricted Upload of File with Dangerous Type vulnerability in Vfairs 3.3 vFairs 3.3 is affected by Remote Code Execution. | 6.5 |
| 2021-05-26 | CVE-2020-26679 | Authorization Bypass Through User-Controlled Key vulnerability in Vfairs 3.3 vFairs 3.3 is affected by Insecure Permissions. | 4.0 |
| 2021-05-26 | CVE-2020-26680 | Cross-site Scripting vulnerability in Vfairs 3.3 In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. | 3.5 |