Skip to content
OpenAdvisories

Vendor

UserSpice

2 known vulnerabilities.

Products

userSpice 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-25349

    userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header

    userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header. Attackers can send crafted requests to the backup.php endpoint with XSS payloads in the X-Forwarded-For h…

    UserSpice userSpice