Crowd Favorite

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Crowd Favorite records in CISA KEV

No Crowd Favorite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Progressive License 1 record LOW

Records

1 record in Progressive License · all components

TI-2022-02009 CVE-2022-2171 · GHSA-j2wv-pvcq-h7hf

Progressive License <= 1.1.0 - CSRF to Stored XSS

LOW 24

The Progressive License WordPress plugin through 1.1.0 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00315 Published 2022-08-01 No fix listed CWE-352

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0