Shawfactor vulnerabilities
We track 3 vulnerabilities in Shawfactor products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 24, 2025.
Latest Shawfactor vulnerabilities
- 7.1 High severity
LH OGP Meta: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in shawfactor LH OGP Meta lh-ogp-meta-tags allows Stored XSS.This issue affects LH OGP Meta: from n/a through <= 1.73.
- 7.1 High severity
LH Email: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Email lh-email allows Reflected XSS.This issue affects LH Email: from n/a through <= 1.12.
- 7.1 High severity
LH Login Page: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shawfactor LH Login Page lh-login-page allows Reflected XSS.This issue affects LH Login Page: from n/a through <= 2.14.