Read the docs

Cloud Manager Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cloud Manager Project records in CISA KEV

No Cloud Manager Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cloud Manager 1 record MEDIUM

Records

1 record in Cloud Manager · all components

TI-2023-00399 CVE-2023-0421 · GHSA-6jwf-2xx4-59h4

Cloud Manager <= 1.0 - Reflected XSS

Priority MEDIUM 60

The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0051 Published 2023-05-08 No fix listed
Open these records in search →