SteVe vulnerabilities
We track 2 vulnerabilities in SteVe products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 24, 2025.
2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score
Latest SteVe vulnerabilities
- 7.1 High severity
Availability Calendar: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Steve Availability Calendar availability allows Stored XSS.This issue affects Availability Calendar: from n/a through <= 0.2.4.
- 7.1 High severity
Canalplan: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Canalplan canalplan-ac allows Reflected XSS.This issue affects Canalplan: from n/a through <= 5.31.