VYPR

star-rating

by Countly

Source repositories

CVEs (1)

  • CVE-2026-44977CriOct 16, 2026
    risk 0.52cvss 9.0epss —

    countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global application administrator to use uploadFeedbackFile to store attacker-controlled active content while trusting the…