Arrowjs vulnerabilities
We track 1 vulnerability in Arrowjs products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 23, 2024.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Arrowjs vulnerabilities
- 9.1 Critical severity
arrow_cms: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A host header injection vulnerability exists in the forgot password functionality of ArrowCMS version 1.0.0. By sending a specially crafted host header in the forgot password request, it is possible to send password reset links to users which, once clicked, le