PatchTheCVEniftypm vulnerabilities
Recent CVEs affecting niftypm products. 2 tracked.
niftypm has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-21. Highest priority: CVE-2020-26049 (score 44/100).
- CVE-2020-26049 MEDIUM 6.1 DOWNGRADE Nifty-PM CPE 2.3 is affected by stored HTML injection
- CVE-2020-25071 MEDIUM 5.4 DOWNGRADE Nifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered upon a Project
FAQ
How do I fix niftypm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is niftypm being exploited right now?
None of the tracked niftypm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which niftypm CVE should I patch first?
CVE-2020-26049 currently ranks highest (44/100): Nifty-PM CPE 2.3 is affected by stored HTML injection.