arenaim
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Arena.IM – Live Blogging for real-time events | 3 | – | Dec 12, 2024 |
Exploited and recent CVEs
- CVE-2024-12526 Arena.IM – Live Blogging for real-time events <= 0.4.1 - Cross-Site Request Forgery to Settings Update 0.2%
- CVE-2024-12463 Arena.IM – Live Blogging for real-time events <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via arena_embed_amp Shortcode 0.3%
- CVE-2024-11384 Arena.IM – Live Blogging for real-time events <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%