Approved changes feed: RSS · Atom

cpe:2.3:a:thinksaas:thinksaas:2.91:*:*:*:*:*:*:*

part: a version: 2.91 update: *

VendorThinksaas (28a9567d-57cf-51cb-8297-9fc2f0678dfb)
ProductThinksaas (70108594-b6ff-5e73-bdb1-b49579ae67c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/thinksaas/thinksaas purl2cpe 2026-06-01 10:16:36.395129
pkg:github/thinksaas/thinksaas purl2cpe 2026-06-01 10:16:36.395131

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-16665 vulnerable 2026-06-08 05:13:09.115284 Details available
An issue was discovered in ThinkSAAS 2.91. There is XSS via the content to the index.php?app=group&ac=comment&ts=do&js=1 URI, as demonstrated by a crafted SVG document in the SRC attribute of an EMBED element.
Published: 2019-09-21T17:44:59.000Z
Updated: 2024-08-05T01:17:41.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16664 vulnerable 2026-06-08 05:13:09.114788 Details available
An issue was discovered in ThinkSAAS 2.91. There is XSS via the index.php?app=group&ac=create&ts=do groupname parameter.
Published: 2019-09-21T17:45:11.000Z
Updated: 2024-08-05T01:17:41.063Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.