Anisha Online Note Sharing vulnerabilities

2 CVEs affecting Anisha Online Note Sharing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-7157, published 2025-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-7157, published 2025-07-08. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument…
CVE-2025-7124, published 2025-07-07. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Image…