Rhewlif Donation Thermometer vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rhewlif Donation Thermometer, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2025-67550rhewlifdonation thermometer+1
EPSS score
0.20%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rhewlif Donation Thermometer donation-thermometer allows Stored XSS.This issue affects Donation Thermometer: from n/a through <= 2.2.6.5.3CVE-2025-64636rhewlifdonation thermometer+1
EPSS score
0.29%
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.