Laborator Neon — known CVE vulnerabilities

Every CVE whose affected-product data names Laborator Neon, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-20141 — CVSS 6.1 (medium): An XSS issue was discovered in the Laborator Neon theme 2.0 for WordPress via the data/autosuggest-remote.php q parameter.
• CVE-2020-13890 — CVSS 5.4 (medium): The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.
• CVE-2020-23576 — CVSS 5.4 (medium): Laborator Neon dashboard v3 is affected by stored Cross Site Scripting (XSS) via the chat tab.