Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

UserSpice vulnerabilities

2 published CVEs name UserSpice among the affected products.

Published CVEs
2
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 0Medium 1Low 0Not scored 0

Newest CVEs

  • CVE-2018-25350

    userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php

    UserSpice · userSpice

    Critical9.3
  • CVE-2018-25349

    userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header

    UserSpice · userSpice

    Medium5.1

Products with the most CVEs

  1. userSpice2

Most common weaknesses

  1. CWE-204 1
  2. CWE-79 Cross-site scripting (XSS)1