Html-js vulnerabilities
We track 2 vulnerabilities in Html-js products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Html-js vulnerabilities
- 8.8 High severity
Doracms: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint.
- 9.8 Critical severity
Doracms: Improper Restriction of Excessive Authentication Attempts
DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.