Xiao5ucompany Project Xiao5ucompany — known CVE vulnerabilities

Every CVE whose affected-product data names Xiao5ucompany Project Xiao5ucompany, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-14960 — CVSS 8.8 (high): Xiao5uCompany 1.7 has CSRF via admin/Admin.asp.
• CVE-2018-14527 — CVSS 6.1 (medium): Feedback.asp in Xiao5uCompany 1.7 has XSS because the XSS protection mechanism in Safe.asp is insufficient (for example, it considers…