Skip to content
OpenAdvisories

Package · NuGet

AjaxNetProfessional

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2021-43853

    Cross-Site Scripting in AjaxNetProfessional

    Ajax.NET Professional (AjaxPro) is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected cor…

    michaelschwarz Ajax.NET-Professional AjaxNetProfessional NuGet
  • High 8.1
    CVE-2021-23758 Exploited Public exploit EPSS 83%

    Deserialization of Untrusted Data

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

    AjaxNetProfessional NuGet
    KEV Aug 26, 2026