Skip to content
OpenAdvisories

Product · Sismics

docs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-22115

    Teedy - Stored Cross-Site Scripting (XSS) in Tag Name

    In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name o…

    Sismics docs
  • Critical 9.6
    CVE-2022-22114

    Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality

    In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. T…

    Sismics docs