Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package vvvebJs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2024-29272 — CVSS 6.5 (medium): Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and…
CVE-2024-29271 — CVSS 6.1 (medium): Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and…