What’s Vulnerable › Products

FactorJS Factor vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your FactorJS Factor version is affected

Latest FactorJS Factor vulnerabilities

• CVE-2021-25985 — FactorJS - Insufficient Session Expiration Leads to a Local Account Takeover (CVSS 9.8)
• CVE-2021-25984 — FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality (CVSS 6.1)
• CVE-2021-25983 — FactorJS - Reflected Cross-Site Scripting (XSS) in Tags and Categories Functionality (CVSS 6.1)
• CVE-2021-25982 — FactorJS - Reflected Cross-Site Scripting (XSS) in Search Functionality (CVSS 6.1)