Read the docs

A17lab

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

A17lab records in CISA KEV

No A17lab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpstickybar 2 records HIGH

Records

2 records

TI-2024-05352 CVE-2024-5765 · GHSA-qjh7-f97r-9p56

WpStickyBar <= 2.1.0 - Unauthenticated SQLi

Priority HIGH 82

The WpStickyBar WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.27232 Published 2024-07-30 No fix listed CWE-89
TI-2024-05774 CVE-2024-6226 · GHSA-vfqx-2vvp-j7qq

WpStickyBar <= 2.1.0 - Reflected XSS

Priority MEDIUM 60

The WpStickyBar WordPress plugin through 2.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00359 Published 2024-07-30 No fix listed CWE-79
Open these records in search →