Read the docs

Content Staging Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Content Staging Project records in CISA KEV

No Content Staging Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Content Staging 1 record LOW

Records

1 record in Content Staging · all components

TI-2021-16723 CVE-2021-39356 · GHSA-9xwx-6whw-r67w

Content Staging <= 2.0.1 Authenticated Stored Cross-Site Scripting

Priority LOW 27

The Content Staging WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via several parameters that are echo'd out via the ~/templates/settings.php file which a…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00989 Published 2021-10-21 No fix listed CWE-79
Open these records in search →