Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2024-31613BOSSCMS · n/a Medium5.4EPSS 0.2%2024-06-10CVE Database V5CVE-2024-31613 BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code." EPSS 0.2%Vulnerability	CVE Database V5	2024-06-10
High	7.1	EPSS 0.4%	CVE-2024-31609BOSSCMS · n/a High7.1EPSS 0.4%2024-04-25CVE Database V5CVE-2024-31609 Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration. EPSS 0.4%Vulnerability	CVE Database V5	2024-04-25

Page 1 of 1