Skip to content
OpenAdvisories

Vendor

Cordaware

4 known vulnerabilities.

Products

bestinformed Web 3 bestinformed Infoclient 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-0424

    Multiple Authenticated Stored Cross-Site Scripting

    In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple authenticated stored cross-site scripting vulnerabilities. An authenticated attacker is able to compromise the sessions of other users on the server by i…

    Cordaware bestinformed Web
  • Medium 5.3
    CVE-2025-0423

    Multiple Unauthenticated Stored Cross-Site Scripting

    In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple unauthenticated stored cross-site scripting vulnerabilities. An unauthenticated attacker is able to compromise the sessions of users on the server by inj…

    Cordaware bestinformed Web