Read the docs

ARI Soft

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

ARI Soft records in CISA KEV

No ARI Soft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ari Stream Quiz 3 records MEDIUM Ari Adminer 2 records LOW Contact Form 7 Connector 2 records MEDIUM Ari Fancy Lightbox 1 record LOW

Records

1 record in Ari Fancy Lightbox · all components

TI-2022-00102 CVE-2022-0161 · GHSA-32jc-5c8m-p2c9

ARI Fancy Lightbox < 1.3.9 - Reflected Cross-Site Scripting

Priority LOW 29

The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00876 Published 2022-03-14 Fixed in 1.3.9 CWE-79
Open these records in search →