arenaim

Products

ProductCVEsExploitedLatest
Arena.IM – Live Blogging for real-time events3–Dec 12, 2024

Exploited and recent CVEs

  • CVE-2024-12526 Medium 4.3 Arena.IM – Live Blogging for real-time events <= 0.4.1 - Cross-Site Request Forgery to Settings Update 0.2%
  • CVE-2024-12463 Medium 6.4 Arena.IM – Live Blogging for real-time events <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via arena_embed_amp Shortcode 0.3%
  • CVE-2024-11384 Medium 6.4 Arena.IM – Live Blogging for real-time events <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%