Threats affecting pkg:github/hassan-mohammed/security-findings

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.5%	CVE-2024-55494security-findings · Cross-site Scripting Medium6.1EPSS 0.5%2025-01-09CVE Database V5CVE-2024-55494 A PHP Code Injection vulnerability that can lead to Remote Code Execution (RCE) and XSS in Opencode Mobile Collect Call v5.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the op_func parameter at /occontrolpanel/index.php. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2025-01-09

Page 1 of 1