Threat database

10 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.2%	CVE-2024-51226vulnerability-research · n/a Medium6.1EPSS 0.2%2026-03-23CVE Database V5CVE-2024-51226 A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Search parameter. EPSS 0.2%Vulnerability	CVE Database V5	2026-03-23
Medium	4.8	EPSS 0.2%	CVE-2024-51224vulnerability-research · n/a Medium4.8EPSS 0.2%2026-03-23CVE Database V5CVE-2024-51224 Multiple cross-site scripting (XSS) vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum and enginenumber parameters. EPSS 0.2%Vulnerability	CVE Database V5	2026-03-23
Medium	4.8	EPSS 0.2%	CVE-2024-51223vulnerability-research · n/a Medium4.8EPSS 0.2%2026-03-23CVE Database V5CVE-2024-51223 A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter. EPSS 0.2%Vulnerability	CVE Database V5	2026-03-23
Medium	4.8	EPSS 0.2%	CVE-2024-51222vulnerability-research · n/a Medium4.8EPSS 0.2%2026-03-23CVE Database V5CVE-2024-51222 A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter. EPSS 0.2%Vulnerability	CVE Database V5	2026-03-23
Critical	9.9	EPSS 0.5%	CVE-2025-67164vulnerability-research · n/a Critical9.9EPSS 0.5%2025-12-17CVE Database V5CVE-2025-67164 An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute arbitrary code via uploading a crafted PHP file. EPSS 0.5%Vulnerability	CVE Database V5	2025-12-17
High	8.1	EPSS 0.7%	CVE-2024-57030vulnerability-research · n/a High8.1EPSS 0.7%2025-01-17CVE Database V5CVE-2024-57030 Wegia < 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos_funcionario.php via the id parameter. EPSS 0.7%Vulnerability	CVE Database V5	2025-01-17
High	8.8	EPSS 0.5%	CVE-2024-54818vulnerability-research · n/a High8.8EPSS 0.5%2025-01-08CVE Database V5CVE-2024-54818 SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control.via /php-lms/admin/?page=user/list. EPSS 0.5%Vulnerability	CVE Database V5	2025-01-08
Medium	6.1	EPSS 0.4%	CVE-2024-48448vulnerability-research · n/a Medium6.1EPSS 0.4%2024-10-25CVE Database V5CVE-2024-48448 An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page. EPSS 0.4%Vulnerability	CVE Database V5	2024-10-25
Medium	5.4	EPSS 0.4%	CVE-2024-29413Vulnerability-Research · n/a Medium5.4EPSS 0.4%2024-04-03CVE Database V5CVE-2024-29413 Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function. EPSS 0.4%Vulnerability	CVE Database V5	2024-04-03
High	7.6	EPSS 0.6%	CVE-2024-27705vulnerability-research · n/a High7.6EPSS 0.6%2024-04-03CVE Database V5CVE-2024-27705 Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted PDF file to the files/browse endpoint. EPSS 0.6%Vulnerability	CVE Database V5	2024-04-03

Page 1 of 1