Liveaction Livesp — known CVE vulnerabilities

Every CVE whose affected-product data names Liveaction Livesp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-24721 — CVSS 5.4 (medium): A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML.
• CVE-2023-27775 — CVSS 5.4 (medium): A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a crafted payload.