Alojapro

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Alojapro records in CISA KEV

No Alojapro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Alojapro Widget 1 record LOW

Records

1 record

TI-2021-06817 CVE-2021-24530 · GHSA-76cj-38jr-6rg5

Alojapro Widget <= 1.1.15 - Authenticated Stored Cross-Site Scripting (XSS)

LOW 23

The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is dis…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-09-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0