Vulnerabilities in sjaved
7 resultsVexday analysis
O fornecedor sjaved apresenta um perfil de risco baixo com 7 CVEs catalogadas, nenhuma em exploração ativa conhecida e sem vulnerabilidades críticas. A fraqueza predominante é CWE-79 (cross-site scripting), típica de aplicações web, com apenas 1 divulgação nos últimos 90 dias, indicando ritmo moderado de descobertas.
CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-1278MEDIUMEasy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2023-6883MEDIUMEasy Social Feed <= 6.5.2 - Missing Authorization to Settings ModificationEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2024-1214MEDIUMEasy Social Feed <= 6.5.4 - Cross-Site Request ForgeryEPSS 0.2%CVE-2024-1213MEDIUMEasy Social Feed <= 6.5.4 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-6067MEDIUMEasy Social Feed – Social Photos Gallery – Post Feed – Like Box <= 6.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingEPSS 0.2%