Read the docs

codetipi

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

codetipi records in CISA KEV

No codetipi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
15zine 1 record LOW

Records

1 record in 15zine · all components

TI-2020-18746 CVE-2020-36510 · GHSA-rmfp-978v-2wq8

15Zine < 3.3.0 - Reflected Cross-Site Scripting

Priority LOW 32

The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0259 Published 2022-02-28 Fixed in 3.3.0 CWE-79
Open these records in search →