Read the docs

bannersky

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

bannersky records in CISA KEV

No bannersky vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bsk Pdf Manager 3 records LOW Bsk Forms Blacklist 2 records MEDIUM Bsk Contact Form 7 Blacklist 1 record LOW

Records

2 records in Bsk Forms Blacklist · all components

TI-2023-05510 CVE-2023-5980 · GHSA-vp7j-cfrc-8499

BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unf…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00379 Published 2023-12-26 Fixed in 3.7 CWE-79
TI-2023-14650 CVE-2023-30872 · GHSA-36cp-3699-pj66

WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00627 Published 2023-12-20 No fix listed CWE-89
Open these records in search →