All 2 CVE vulnerabilities found in userSpice, with AI-generated Chinese analysis, references, and POCs.
Vendor: UserSpice
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-25350 | userSpice 4.3.24 Username Enumeration via existingUsernameCheck.php CWE-204 | 9.8 | Critical | 2026-05-23 |
| CVE-2018-25349 | userSpice 4.3.24 Cross-Site Scripting via X-Forwarded-For Header CWE-79 | 6.1 | Medium | 2026-05-23 |
All 2 known CVE vulnerabilities affecting userSpice with full Chinese analysis, references, and POCs where available.