Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Cristiano Zanca records in CISA KEVNo Cristiano Zanca vulnerabilities are listed in CISA KEV.
Priority LOW 33
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristiano Zanca WooCommerce Fattureincloud woo-fattureincloud allows Reflected XSS.This issue affects WooCommerce Fatt…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00317 · Published 2025-04-01 · No fix listed CWE-79
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00113 · Published 2025-09-09 · No fix listed CWE-352
