Read the docs

Code Supply Co.

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Code Supply Co. records in CISA KEV

No Code Supply Co. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Absolute Reviews 2 records LOW Sight 1 record LOW Squaretype 1 record LOW

Records

2 records in Absolute Reviews · all components

TI-2024-08325 CVE-2024-8965 · GHSA-vqqh-7rx8-gc89

Absolute Reviews <= 1.1.3 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Criteria Name

Priority LOW 28

The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of a custom post criteria in all versions up to, and including, 1.1.3 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00313 Published 2024-09-27 No fix listed CWE-79
TI-2021-03283 CVE-2021-4426 · GHSA-2q53-wj8h-wcgw

Absolute Reviews <= 1.0.8 - Cross-Site Request Forgery Bypass

Priority LOW 21

The Absolute Reviews plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.8.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00563 Published 2023-07-12 No fix listed CWE-352
Open these records in search →