IN
Vendor
indieweb
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-14893 | IN IndieWeb indieweb | 6.4 | Jan 9 | IndieWeb <= 4.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via 'Telephone' Parameter |
| CVE-2025-12028 | IN IndieAuth indieweb | 8.8 | Oct 24 | IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens |