Vulnerabilities (CVE)

Filtered by vendor Cnvs Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-1000507 1 Cnvs 1 Canvas 2024-02-28 3.5 LOW 5.4 MEDIUM
Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in denial of service and execution of javascript code.
CVE-2017-8298 1 Cnvs 1 Canvas 2024-02-28 3.5 LOW 5.4 MEDIUM
cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts > Add New" action, and during creation of new tags and users.