Vulnerabilities > WPN XM

DATE CVE VULNERABILITY TITLE RISK
2023-11-03 CVE-2023-4591 Inclusion of Functionality from Untrusted Control Sphere vulnerability in Wpn-Xm 0.8.6
A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion (LFI) via the /tools/webinterface/index.php?page parameter by sending a GET request.
network
low complexity
wpn-xm CWE-829
critical
9.8
2023-11-03 CVE-2023-4592 Cross-site Scripting vulnerability in Wpn-Xm 0.8.6
A Cross-Site Scripting vulnerability has been detected in WPN-XM Serverstack affecting version 0.8.6.
network
low complexity
wpn-xm CWE-79
6.1