Left Project Left — known CVE vulnerabilities

Every CVE whose affected-product data names Left Project Left, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-45557 — CVSS 6.1 (medium): Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via file names.
• CVE-2022-45558 — CVSS 6.1 (medium): Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag.