Read the docs

bannersky

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

bannersky records in CISA KEV

No bannersky vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bsk Pdf Manager 3 records LOW Bsk Forms Blacklist 2 records MEDIUM Bsk Contact Form 7 Blacklist 1 record LOW

Records

3 records in Bsk Pdf Manager · all components

TI-2014-04062 CVE-2014-4944 · GHSA-cwh2-4vj6-47c7

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF…

Priority LOW 35

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) categoryid or (2) pdfid…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03553 Published 2014-07-14 No fix listed CWE-89
TI-2021-07142 CVE-2021-24860 · GHSA-3v4q-ppc4-rfgv

BSK PDF Manager < 3.1.2 - Admin+ SQL Injection

Priority LOW 34

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01317 Published 2021-11-29 Fixed in 3.1.2 CWE-89
TI-2023-04699 CVE-2023-5110 · GHSA-r893-9m69-jch8

BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and including, 3.4.1 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00525 Published 2023-10-24 No fix listed CWE-79
Open these records in search →