Vulnerabilities (CVE)

Filtered by vendor Thirtybees Subscribe
Filtered by product Thirty Bees
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-45957 1 Thirtybees 1 Thirty Bees 2024-01-03 N/A 5.4 MEDIUM
A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows attackers to execute arbitrary web script or HTML via $e->getMessage() error mishandling.