Read the docs

CreativeMindsSolutions

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

CreativeMindsSolutions records in CISA KEV

No CreativeMindsSolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cm Download Manager 8 records HIGH Cm Popup 3 records MEDIUM Cm Search And Replace 3 records MEDIUM Cm Answers 2 records LOW Cm Table Of Contents 2 records MEDIUM Tooltip Glossary 2 records LOW Cm Ad Changer 1 record LOW Cm E-mail Blacklist 1 record HIGH

Records

2 records in Cm Table Of Contents · all components

TI-2024-04670 CVE-2024-5029 · GHSA-26fv-px38-wm73

CM Table Of Contents – WordPress TOC Plugin < 1.2.4 - Stored XSS via CSRF

Priority MEDIUM 55

The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00225 Published 2024-11-21 Fixed in 1.2.4 CWE-352
TI-2024-04671 CVE-2024-5030 · GHSA-v664-p69f-2qfg

CM Table Of Contents – WordPress TOC Plugin < 1.2.3 - Settings Reset via CSRF

Priority MEDIUM 51

The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings, which could allow attackers to make a logged in admin perform such action via a CSRF attack

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00199 Published 2024-11-18 Fixed in 1.2.3 CWE-352
Open these records in search →