Read the docs

CryoutCreations

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CryoutCreations records in CISA KEV

No CryoutCreations vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Serious Slider 2 records MEDIUM Esotera 1 record LOW Fluida 1 record LOW Kahuna 1 record LOW Liquido 1 record LOW Mantra 1 record LOW Nirvana 1 record LOW Parabola 1 record LOW

Records

2 records in Serious Slider · all components

TI-2024-10292 CVE-2024-11108 · GHSA-3vx3-2qpf-jvhh

Serious Slider < 1.2.7 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the con…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0033 Published 2024-12-20 Fixed in 1.2.7 CWE-79
TI-2024-23631 CVE-2024-35762 · GHSA-grgx-v94g-52gr

WordPress Serious Slider plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00276 Published 2024-06-21 No fix listed CWE-79
Open these records in search →