Read the docs

Cnrs

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cnrs records in CISA KEV

No Cnrs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hal 1 record LOW

Records

1 record

TI-2021-16712 CVE-2021-39345 · GHSA-fp93-4355-39wq

HAL <= 2.1.1 Authenticated Stored Cross-Site Scripting

Priority LOW 27

The HAL WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/wp-hal.php file which allowed attackers with administrativ…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00953 Published 2021-10-15 No fix listed CWE-79
Open these records in search →