Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Arena.IM – Live Blogging for real-time events — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Arena.IM – Live Blogging for real-time events, with AI-generated Chinese analysis, references, and POCs.

Vendor: arenaim

CVE IDTitleCVSSSeverityPublished
CVE-2024-12526 Arena.IM – Live Blogging for real-time events <= 0.4.1 - Cross-Site Request Forgery to Settings Update CWE-352 4.3 Medium2024-12-12
CVE-2024-12463 Arena.IM – Live Blogging for real-time events <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via arena_embed_amp Shortcode CWE-79 6.4 Medium2024-12-12
CVE-2024-11384 Arena.IM – Live Blogging for real-time events <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-12-12

All 3 known CVE vulnerabilities affecting Arena.IM – Live Blogging for real-time events with full Chinese analysis, references, and POCs where available.