Mark O'Donnell vulnerabilities
We track 3 vulnerabilities in Mark O'Donnell products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2025.
Latest Mark O'Donnell vulnerabilities
- 7.1 High severity
MSTW League Manager: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Mark O'Donnell MSTW League Manager mstw-league-manager allows Stored XSS.This issue affects MSTW League Manager: from n/a through <= 2.10.
- 7.1 High severity
Team Rosters: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O'Donnell Team Rosters team-rosters allows Reflected XSS.This issue affects Team Rosters: from n/a through <= 4.7.
- 9.8 Critical severity
Team Rosters: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Mark O'Donnell Team Rosters team-rosters allows Object Injection.This issue affects Team Rosters: from n/a through <= 4.8.2.