Awsm

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Awsm records in CISA KEV

No Awsm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Awsm Team 1 record LOW Embed Any Document 1 record LOW Wp Job Openings 1 record LOW

Records

3 records

TI-2024-24958 CVE-2024-37454 · GHSA-g5xw-fr6p-pc5j

WordPress AWSM Team – Team Showcase Plugin plugin <= 1.3.1 - Local File Inclusion vulnerability

LOW 39

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AWSM Innovations AWSM Team allows Path Traversal.This issue affects AWSM Team: from n/a through 1.3.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00621 Published 2024-07-09 No fix listed CWE-22

TI-2023-09521 CVE-2023-23707 · GHSA-4fvv-j62f-2gpq

Unrestricted file upload in Awsm Innovations Embed Any Document – Embed PDF, Word…

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Unrestricted Upload of File with Dangerous Type vulnerability in Awsm Innovations Embed Any Document – Embed PDF, Word, PowerPoint and…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00384 Published 2023-03-23 No fix listed CWE-434

TI-2023-04543 CVE-2023-4933 · GHSA-88xc-3623-x7qh

WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing

LOW 25

The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private att…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00654 Published 2023-10-16 Fixed in 3.4.3 CWE-552

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0