Advisories · Technology
maalfer Pentestify.
Every CVE that names maalfer Pentestify among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
CSS sanitizer bypass in Pentestify report themes allows forced outbound requests
- maalfer Pentestify
- CWE-180
- CVSS 5.1 Medium
Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes
- maalfer Pentestify
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Stored Cross-site Scripting in Pentestify user account deletion via unescaped username
- maalfer Pentestify
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Stored Cross-site Scripting in Pentestify finding severity field
- maalfer Pentestify
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Stored XSS in Pentestify via unsanitized finding images and report client logo
- maalfer Pentestify
- Cross-site scripting (XSS)