Clickfunnels

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Clickfunnels records in CISA KEV

No Clickfunnels vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Clickfunnels 2 records MEDIUM

Records

2 records

TI-2022-04378 CVE-2022-4782 · GHSA-wrcx-pwc5-7vc2

ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode

MEDIUM 58

The ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00444 Published 2023-08-16 No fix listed

TI-2022-23357 CVE-2022-47152 · GHSA-xcjj-5jqp-8xpv

WordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Etison, LLC ClickFunnels plugin <= 3.1.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00253 Published 2023-05-24 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0