Read the docs

Artisanworkshop

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Artisanworkshop records in CISA KEV

No Artisanworkshop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Japanized For Woocommerce 2 records MEDIUM

Records

2 records

TI-2023-00899 CVE-2023-0948 · GHSA-jf29-vf7j-2f4w

Japanized For WooCommerce < 2.5.8 - Reflected XSS

Priority MEDIUM 60

The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0085 Published 2023-05-08 Fixed in 2.5.8 CWE-79
TI-2023-00893 CVE-2023-0942 · GHSA-chwv-c53r-9qh6

Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting

Priority LOW 30

The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escapin…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01213 Published 2023-02-21 No fix listed CWE-79
Open these records in search →