Skip to content
OpenAdvisories

Vendor

Holded

2 known vulnerabilities.

Products

Holded 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-1076

    Stored Cross-Site Scripting vulnerability in Holded

    A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality.

    Holded Holded
  • Medium 4.6
    CVE-2024-4026

    Cross-Site Scripting in the Holded application

    Cross-Site Scripting (XSS) vulnerability in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within all editable parameters within the 'General' and 'Team ID' functionalities, which could result in a session tak…

    Holded Holded