Read the docs

anmari

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

anmari records in CISA KEV

No anmari vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amr Users 2 records MEDIUM

Records

2 records in Amr Users · all components

TI-2022-00989 CVE-2022-1094 · GHSA-27cc-h22h-f622

Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00615 Published 2022-04-25 Fixed in 4.59.4 CWE-79
TI-2022-22314 CVE-2022-45348 · GHSA-7wqv-9w75-qfxv

WordPress amr users Plugin <= 4.59.4 is vulnerable to CSV Injection

Priority MEDIUM 41

Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00779 Published 2023-11-07 No fix listed CWE-1236
Open these records in search →