Skip to content
OpenAdvisories

Vendor

DumbWareio

5 known vulnerabilities.

Products

DumbDrop 3 DumbAssets 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-45231

    DumbAssets 1.0.11 Stored Cross-Site Scripting via Asset Fields

    DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that are stored without server-side sanitization and rendered using innerHTML without client-side e…

    DumbWareio DumbAssets