Vulnerabilities (CVE)

Filtered by vendor Sakura Subscribe
Filtered by product Ts Webfonts
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-32624 1 Sakura 1 Ts Webfonts 2024-02-28 N/A 6.1 MEDIUM
Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.
CVE-2023-32625 1 Sakura 1 Ts Webfonts 2024-02-28 N/A 4.3 MEDIUM
Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by having a user view a malicious page.