Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #9

Scoreboard (UK) flagged for unpatched cross-site scripting flaw

Original: Scoreboard (UK) carries a C trust score with 100% of its 1 CVE unpatched, a CVSS 6.4 XSS (CWE-79). No KEV, but unpatched

UK-based vendor Scoreboard has received a C trust score after leaving its only known vulnerability unpatched, a cross-site scripting flaw (CWE-79) rated CVSS 6.4. The bug does not appear on the KEV exploited-vulnerabilities list, but commentators stress the software remains exposed. Security observers are urging organisations to review whether they use the product and assess their exposure.

Why now: Cybersecurity watchers are highlighting an unpatched XSS flaw in a UK vendor's product as a warning for potential users.

Scoreboard (UK)CVECWE-79

Open on mastodon →

Evidence

• Scoreboard (UK) carries a C trust score with 100% of its 1 CVE unpatched, a CVSS 6.4 XSS (CWE-79). No KEV, but unpatched is unpatched. Check your exposure: # cybersecurity # infosec # Scoreboard https://www. valtersit.com/vendors/scoreboa rd/ · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/4199457