FactorJS

Products

ProductCVEsExploitedLatest
Factor4–Nov 16, 2021

Exploited and recent CVEs

  • CVE-2021-25985 High 7.8 FactorJS - Insufficient Session Expiration Leads to a Local Account Takeover 0.8%
  • CVE-2021-25984 Medium 6.1 FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality 0.7%
  • CVE-2021-25983 Medium 6.1 FactorJS - Reflected Cross-Site Scripting (XSS) in Tags and Categories Functionality 0.7%
  • CVE-2021-25982 Medium 6.1 FactorJS - Reflected Cross-Site Scripting (XSS) in Search Functionality 0.8%