crea8social vulnerabilities and fixes

Recent CVEs affecting crea8social, with upgrade or downgrade steps. 4 tracked.

crea8social has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-03-29. Highest priority: CVE-2018-9123 (score 35/100).

• CVE-2018-9123 MEDIUM 5.4 DOWNGRADE In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.
• CVE-2018-9122 MEDIUM 5.4 DOWNGRADE In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
• CVE-2018-9121 MEDIUM 5.4 DOWNGRADE In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment.
• CVE-2018-9120 MEDIUM 5.4 DOWNGRADE In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.

FAQ

How do I fix crea8social vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is crea8social being exploited right now?

None of the tracked crea8social CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which crea8social CVE should I patch first?

CVE-2018-9123 currently ranks highest (35/100): In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile..

RSS feed for crea8social · ← Back to latest CVEs