Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-36289 1 Webkul 1 Qloapps 2024-11-29 6.1 Medium
An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST email_create and back parameter.
CVE-2024-40318 1 Webkul 1 Qloapps 2024-11-21 7.2 High
An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file.