CallRail, Inc.

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CallRail, Inc. records in CISA KEV

No CallRail, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Callrail Phone Call Tracking 2 records LOW

Records

2 records in Callrail Phone Call Tracking · all components

TI-2023-04651 CVE-2023-5051 · GHSA-rx6j-6g87-2x65

CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The CallRail Phone Call Tracking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'callrail_form' shortcode in versions up to, and including, 0.5.2 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00508 Published 2023-10-27 No fix listed CWE-79

TI-2022-17035 CVE-2022-36796 · GHSA-qm6g-qrgf-9jh7

Cross-site request forgery in CallRail, Inc. CallRail Phone Call Tracking

LOW 27

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00376 Published 2022-09-01 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0