xmpie_ustore vulnerabilities
CVEs whose affected-version data names the xmpie_ustore package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2022-23321Medium· 4.8A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.
A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.
▾ Sunlitxerox · xmpie_ustoreEPSS 0.59%via NVD
CVE-2022-23320High· 7.5XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries
XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensit…
▾ Twilightxerox · xmpie_ustoreEPSS 1.6%via NVD