Read the docs

BestWebSoft

Records87All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

BestWebSoft records in CISA KEV

No BestWebSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form 11 records MEDIUM Contact Form To Db 5 records MEDIUM Error Log Viewer 5 records LOW Visitors Online 4 records MEDIUM Captcha 3 records LOW Facebook Button 3 records LOW Gallery 3 records HIGH Htaccess 3 records MEDIUM

Records

3 records in Gallery · all components

TI-2023-00725 CVE-2023-0765 · GHSA-hxq8-74m8-v4vh

Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

Priority HIGH 73

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00873 Published 2023-04-17 Fixed in 4.7.0 CWE-89
TI-2023-00724 CVE-2023-0764 · GHSA-52x4-hjxq-qrcm

Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting

Priority MEDIUM 58

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-04-17 Fixed in 4.7.0
TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28

Cross-site scripting in BestWebSoft Captcha

Priority LOW 29

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-05-22 No fix listed CWE-79
Open these records in search →