Threat database

6 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.2%	CVE-2026-110366Site Reviews · Missing Authorization Medium5.3EPSS 0.2%2026-10-16CVE Database V5CVE-2026-110366 CVE-2026-110366 is a missing authorization vulnerability in Gemini Labs Site Reviews affecting versions prior to 8.3.5. It allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized modification of site reviews. The vulnerability has a medium severity rating with a CVSS score of 5.3. EPSS 0.2%Vulnerability Gemini Labs	CVE Database V5	2026-10-16
Medium	5.3	EPSS 0.2%	CVE-2026-103340Site Reviews · Missing Authorization Medium5.3EPSS 0.2%2026-10-01CVE Database V5CVE-2026-103340 Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 8.3.2. EPSS 0.2%Vulnerability Gemini Labs	CVE Database V5	2026-10-01
High	7.1	EPSS 0.2%	CVE-2026-94078Site Reviews · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-94078 Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions. EPSS 0.2%Vulnerability Gemini Labs #cwe-79	CVE Database V5	2026-09-30
High	7.1	EPSS 0.3%	CVE-2026-73382Site Reviews · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Gemini Labs… High7.1EPSS 0.3%2026-08-18CVE Database V5CVE-2026-73382 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0. EPSS 0.3%Vulnerability Gemini Labs #cwe-79	CVE Database V5	2026-08-18
Medium	6.5	EPSS 0.4%	CVE-2026-57318Site Reviews · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2026-06-26CVE Database V5CVE-2026-57318 Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions. EPSS 0.4%Vulnerability Gemini Labs #cwe-201	CVE Database V5	2026-06-26
Medium	5.9	EPSS 0.3%	CVE-2024-29095Site Reviews · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Gemini Labs… Medium5.9EPSS 0.3%2024-03-19CVE Database V5CVE-2024-29095 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews.This issue affects Site Reviews: from n/a through <= 6.11.6. EPSS 0.3%Vulnerability Gemini Labs	CVE Database V5	2024-03-19

Showing 1–6 of 6 results