Vendors / CoolHappy Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now CoolHappy records in CISA KEV No CoolHappy vulnerabilities are listed in CISA KEV.
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolHappy Cool Flipbox – Shortcode & Gutenberg Block flip-boxes allows Reflected XSS.This issue affects Cool Flipbox –…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00293 · Published 2025-04-17 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolHappy The Events Calendar Countdown Addon countdown-for-the-events-calendar allows Stored XSS.This issue affects T…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00269 · Published 2025-06-06 · No fix listed CWE-79
Priority LOW 19
Missing Authorization vulnerability in CoolHappy The Events Calendar Countdown Addon countdown-for-the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00181 · Published 2026-01-06 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0