Boom vulnerabilities

2 vulnerabilities

Known vulnerabilities in Boom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
8.1CVE-2022-274383cxcall_flow_designer+69
EPSS score
1.98%
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.5.4CVE-2023-3790boomcms+1
EPSS score
0.58%
A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the function add of the component assets-manager. The manipulation of the argument title/description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235057 was assigned to this vulnerability.