Browse / Essity

Essity

See its reports on the map

What gets reported to Essity

• Misconfiguration1
• Cross-site Scripting1
• Injection and Smuggling1
• SQL Injection1
• Authentication1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Unauthenticated API allows reading, writing to and deleting any user's private chat history on ████████Misconfiguration · critical
   68 votes
2. Pre-authentication Stored XSS in Essity Customer-Service Pipeline via ContactApi (reCAPTCHA bypass + no rate limit)Cross-site Scripting (XSS) - Stored · critical
   48 votes
3. HTML Injection in Contact Form Email Enables Phishing via Legitimate ████████ InfrastructureImproper Output Neutralization for Logs · medium
   42 votes
4. Critical SQL Injection WDM API (████████)SQL Injection · critical
   40 votes
5. Unauthenticated self-registration on ████████ grants full access to internal supplier procurement portal and vendor dataMissing Authentication for Critical Function · medium
   29 votes
6. Mass PII Exposure: 120,000+ Consumer Email Addresses Leaked via Author Enumeration on ████████Information Disclosure · critical
   24 votes