Threats affecting pkg:github/thinksaas/ThinkSAAS

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.4%	CVE-2024-33102ThinkSAAS · A Stored Cross-site Scripting (XSS) Medium5.4EPSS 0.4%2024-04-30CVE Database V5CVE-2024-33102 A stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the code parameter. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2024-04-30
Medium	6.1	EPSS 0.4%	CVE-2024-33101ThinkSAAS · A Stored Cross-site Scripting (XSS) Medium6.1EPSS 0.4%2024-04-30CVE Database V5CVE-2024-33101 A stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the word parameter. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2024-04-30

Page 1 of 1