Skip to content
OpenAdvisories

Vendor

Lewe

3 known vulnerabilities.

Products

TeamCal Neo 2 WebMeasure 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-40697

    Reflected Cross-Site Scripting (XSS) in Lewe WebMeasure

    Reflected Cross-Site Scripting (XSS) vulnerability in '/index.php' in Lewe WebMeasure, which allows remote attackers to execute arbitrary code through the 'page' parameter. This vulnerability can be exploited to steal sensitive user data, such as session cook…

    Lewe WebMeasure
  • Medium 6.1
    CVE-2025-0930

    Reflected Cross-Site Scripting (XSS) vulnerability in TeamCal Neo

    Reflected Cross-Site Scripting (XSS) in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScript code, after injecting code via the ‘abs’ parameter in ‘/teamcal/src/index.php’.

    Lewe TeamCal Neo