Vulnerabilities (CVE)

Filtered by vendor Nottingham.ac Subscribe
Filtered by product Xerte Online Toolkits
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-44663 1 Nottingham.ac 1 Xerte Online Toolkits 2024-02-28 7.5 HIGH 9.8 CRITICAL
A Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in connetor.php.
CVE-2021-44662 1 Nottingham.ac 1 Xerte Online Toolkits 2024-02-28 4.3 MEDIUM 6.1 MEDIUM
A Site Scripting (XSS) vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link parameter in print.php.