Read the docs

2joomla

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

2joomla records in CISA KEV

No 2joomla vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
2j Slideshow 3 records LOW

Records

3 records in 2j Slideshow · all components

TI-2020-18900 CVE-2020-36729 · GHSA-xcjx-743r-9w2w

Slideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass

Priority LOW 26

The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twoj_slideshow_setup' function called via the wp_ajax_twoj_slideshow_setup AJAX action in versions up…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00715 Published 2023-06-07 No fix listed CWE-285
TI-2022-11896 CVE-2022-29426 · GHSA-79v6-3g86-v959

Cross-site scripting in 2J Slideshow Team Slideshow, Image Slider by 2J

Priority LOW 25

Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00535 Published 2022-05-20 No fix listed CWE-79
Open these records in search →