Read the docs

Cr1000

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cr1000 records in CISA KEV

No Cr1000 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Affiliateimportereb 2 records MEDIUM

Records

2 records

TI-2024-11805 CVE-2024-12733 · GHSA-4g4f-j7gv-ph46

AffiliateImporterEb <= 1.0.6 - Reflected XSS via Search

Priority MEDIUM 60

The AffiliateImporterEb WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privileg…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0034 Published 2025-05-15 No fix listed CWE-79
TI-2024-11804 CVE-2024-12732 · GHSA-9495-7c48-4348

AffiliateImporterEb <= 1.0.6 - Reflected XSS

Priority MEDIUM 60

The AffiliateImporterEb WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privileg…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00579 Published 2025-05-15 No fix listed CWE-79
Open these records in search →