larsdrasmussen

Products

ProductCVEsExploitedLatest
rexCrawler2–May 27, 2026

Exploited and recent CVEs

  • CVE-2026-2280 Medium 4.8 rexCrawler <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings 0.2%
  • CVE-2026-2277 Medium 6.1 rexCrawler <= 1.0.15 - Reflected Cross-Site Scripting via 'url' and 'regex' Parameters 0.3%