Threats affecting pkg:github/zhimengzhe/iBarn

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.3%	CVE-2024-38470iBarn · Cross-site Scripting Medium6.1EPSS 0.3%2024-06-17CVE Database V5CVE-2024-38470 zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-06-17
Medium	6.3	EPSS 0.3%	CVE-2024-38469iBarn · Basic XSS Medium6.3EPSS 0.3%2024-06-17CVE Database V5CVE-2024-38469 zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php. EPSS 0.3%Vulnerability CWE-80	CVE Database V5	2024-06-17
Medium	6.3	EPSS 0.3%	CVE-2024-37625iBarn · Cross-site Scripting Medium6.3EPSS 0.3%2024-06-17CVE Database V5CVE-2024-37625 zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /index.php. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-06-17
Medium	5.4	EPSS 0.5%	CVE-2024-26471iBarn · A Reflected Cross-site Scripting (XSS) Medium5.4EPSS 0.5%2024-02-27CVE Database V5CVE-2024-26471 A reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php. EPSS 0.5%Vulnerability CWE-79	CVE Database V5	2024-02-27

Page 1 of 1