Vulnerabilities (CVE)

Filtered by vendor Felisify Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-2488 1 Felisify 1 Sambabox 2026-06-06 N/A 6.1 MEDIUM
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting (XSS). This issue affects SambaBox: before 5.1.
CVE-2025-2421 1 Felisify 1 Sambabox 2026-06-06 N/A 9.8 CRITICAL
Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1.