Log in Start free

Orangescrum

Products

ProductCVEsExploitedLatest
Orangescrum4–Dec 23, 2025

Exploited and recent CVEs

  • CVE-2021-47716 Medium 5.4 Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints 0.2%
  • CVE-2021-47721 High 8.8 Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation 0.5%
  • CVE-2021-47720 High 7.1 Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters 0.3%
  • CVE-2023-1783 Medium 6.5 OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering 0.6%