Aggregates CVE and security vulnerability intelligence across all pixeline-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Disclosed issues often relate to vendor risk cross-site scripting; exposure may include vendor impact session compromise in vendor surface production workloads and vendor surface software deployment contexts.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2021-40924 | Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the first_name parameter. | [email protected] | 6.1 | 0.82% | 2021-10-01 | 2024-11-21 |
| CVE-2021-40923 | Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter. | [email protected] | 6.1 | 0.82% | 2021-10-01 | 2024-11-21 |
| CVE-2021-40922 | Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the last_name parameter. | [email protected] | 6.1 | 0.82% | 2021-10-01 | 2024-11-21 |
| CVE-2019-9002 | An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the database_host parameter if the installer remains present in its original directory after installation is completed. | [email protected] | 9.8 | 2.42% | 2019-02-22 | 2024-11-21 |