Safarimontage Safari Montage — known CVE vulnerabilities

Every CVE whose affected-product data names Safarimontage Safari Montage, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-45425 — CVSS 6.1 (medium): Reflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote attackers to execute JavaScript codes.
• CVE-2021-45818 — CVSS 6.1 (medium): SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting.