GOautodial Vulnerabilities and Affected Products
Vulnerabilities associated with GOautodial.
Products
Clear product- GOautodial2 vulnerabilities
- GOautodial API2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-25316MEDIUM | GOautodial 4.0 - 'CreateEvent' Persistent Cross-Site ScriptingGOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the event title parameter. Attackers can exploit the CreateEvent.php endpoint by sending crafted POST requests with XSS payloads to execute arbitrary JavaScript in victim browsers. CWE-79Feb 11, 2026 | CVSS5.1v4.0 | EPSS0.184% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-37018MEDIUM | GOautodial 4.0 - Persistent Cross-Site ScriptingGOautodial 4.0 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through message subjects. Attackers can craft messages with embedded JavaScript that will execute when an administrator reads the message, potentially stealing session cookies or executing client-side attacks. CWE-79Jan 29, 2026 | CVSS5.1v4.0 | EPSS0.24% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |