Skip to content
OpenAdvisories

Package · NuGet

AjaxNetProfessional

3 known vulnerabilities.

3 results · Feed

  • Medium 6.3

    Cross-site Scripting in Ajax.NET Professional

    Ajax.NET Professional (AjaxPro) is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attac…

  • High 8.7

    Cross-Site Scripting in AjaxNetProfessional

    Ajax.NET Professional (AjaxPro) is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected cor…

  • High 8.1
    CVE-2021-23758 Exploited Public exploit EPSS 83%

    Deserialization of Untrusted Data

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

    KEV Aug 26, 2026