Skip to content
OpenAdvisories

Package · Debian

tryton-sao

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.4
    CVE-2020-37014

    Tryton 5.4 - Persistent Cross-Site Scripting

    Tryton 5.4 contains a persistent cross-site scripting vulnerability in the user profile name input that allows remote attackers to inject malicious scripts. Attackers can exploit the vulnerability by inserting script payloads in the name field, which execute …

    Tryton Tryton tryton-sao Debian
  • Medium 5.4
    CVE-2025-66420

    Tryton sao allows XSS via an HTML attachment

    Tryton sao (aka tryton-sao) before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67.

    Tryton sao tryton-sao tryton-sao Debian Ubuntu npm
  • Medium 5.4
    CVE-2025-66421

    Tryton sao allows XSS because it does not escape completion values

    Tryton sao (aka tryton-sao) before 7.6.11 allows XSS because it does not escape completion values. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.69.

    Tryton sao tryton-sao tryton-sao Debian Ubuntu npm