CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information. | 5.4 |
Medium |
||
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses. | 9.8 |
Critical |