Syguestbook A5 Project Syguestbook A5 — known CVE vulnerabilities

Every CVE whose affected-product data names Syguestbook A5 Project Syguestbook A5, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-13949 — CVSS 8.8 (high): SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin…
• CVE-2019-13948 — CVSS 5.4 (medium): SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS…
• CVE-2019-13950 — CVSS 5.4 (medium): index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment.