Arrow Plugins

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Arrow Plugins records in CISA KEV

No Arrow Plugins vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in The Awesome Feed · all components

TI-2023-24730 CVE-2023-46077 · GHSA-32vv-cw3x-ch8f

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-26 No fix listed CWE-79

TI-2023-23790 CVE-2023-44264 · GHSA-wjqg-8gh6-x2p4

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Arrow Plugins The Awesome Feed – Custom Feed plugin <= 2.2.5 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-10-02 No fix listed CWE-79