Threats affecting pkg:github/hebing123/HadSky

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2024-30886HadSky · A Stored Cross-site Scripting (XSS) Medium5.4EPSS 0.3%2024-04-23CVE Database V5CVE-2024-30886 A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-04-23
Medium	6.1	EPSS 0.5%	CVE-2024-30885HadSky · Reflected Cross-Site Scripting (XSS) Medium6.1EPSS 0.5%2024-04-11CVE Database V5CVE-2024-30885 Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component . EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2024-04-11

Page 1 of 1