Crea8social — known CVE vulnerabilities

Every CVE whose affected-product data names Crea8social, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-9120 — CVSS 5.4 (medium): In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.
• CVE-2018-9121 — CVSS 5.4 (medium): In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment.
• CVE-2018-9122 — CVSS 5.4 (medium): In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
• CVE-2018-9123 — CVSS 5.4 (medium): In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.
• CVE-2015-1054 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web…