C.p.sub Project C.p.sub — known CVE vulnerabilities

Every CVE whose affected-product data names C.p.sub Project C.p.sub, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-7738 — CVSS 6.5 (medium): C.P.Sub before 5.3 allows CSRF via a manage.php?p=article_del&id= URI.
• CVE-2017-12856 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword…