{"items":[{"id":"CVE-2021-25985","published":"2021-11-16T09:45:19.000Z","updated":"2025-04-30T15:44:32.788Z","title":"FactorJS - Insufficient Session Expiration Leads to a Local Account Takeover","severity":"HIGH","score":7.8,"vendor":"FactorJS","product":"Factor","kev":false,"epss":0.0078,"kevAdded":null,"exploit":true},{"id":"CVE-2021-25984","published":"2021-11-16T09:45:18.000Z","updated":"2025-04-30T15:44:41.288Z","title":"FactorJS - Stored Cross-Site Scripting (XSS) in Post Reply Functionality","severity":"MEDIUM","score":6.1,"vendor":"FactorJS","product":"Factor","kev":false,"epss":0.00714,"kevAdded":null,"exploit":true},{"id":"CVE-2021-25983","published":"2021-11-16T09:45:16.000Z","updated":"2025-04-30T15:45:32.868Z","title":"FactorJS - Reflected Cross-Site Scripting (XSS) in Tags and Categories Functionality","severity":"MEDIUM","score":6.1,"vendor":"FactorJS","product":"Factor","kev":false,"epss":0.00714,"kevAdded":null,"exploit":true},{"id":"CVE-2021-25982","published":"2021-11-16T09:45:15.000Z","updated":"2025-04-30T15:45:40.376Z","title":"FactorJS - Reflected Cross-Site Scripting (XSS) in Search Functionality","severity":"MEDIUM","score":6.1,"vendor":"FactorJS","product":"Factor","kev":false,"epss":0.00757,"kevAdded":null,"exploit":true}]}