Mangoswebv4 Project Mangoswebv4 — known CVE vulnerabilities

Every CVE whose affected-product data names Mangoswebv4 Project Mangoswebv4, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2017-6478 — CVSS 6.1 (medium): paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
• CVE-2017-6808 — CVSS 6.1 (medium): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parameter).
• CVE-2017-6809 — CVSS 6.1 (medium): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter).
• CVE-2017-6810 — CVSS 6.1 (medium): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter).
• CVE-2017-6811 — CVSS 6.1 (medium): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter).
• CVE-2017-6812 — CVSS 6.1 (medium): paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter).