Read the docs

Cusmin

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cusmin records in CISA KEV

No Cusmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Absolutely Glamorous Custom Admin 3 records MEDIUM

Records

4 records

TI-2024-02715 CVE-2024-2907 · GHSA-5qhc-gc5j-pvp5

AGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URL

Priority MEDIUM 63

The AGCA WordPress plugin before 7.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00548 Published 2024-04-25 Fixed in 7.2.2 CWE-79
TI-2021-14931 CVE-2021-36823 · GHSA-5qj7-xwrg-68v3

WordPress Absolutely Glamorous Custom Admin plugin <= 6.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Priority LOW 37

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cusmin AGCA - Absolutely Glamorous Custom Admin (WordPress plugin) allows Stored XSS.This issue affects AGCA - Absolut…

CVSS 3.1HIGH 8.2 Network Low privileges User interaction EPSS 0.00741 Published 2021-09-23 No fix listed CWE-79
TI-2021-07223 CVE-2021-24944 · GHSA-9fch-7g2x-c6hx

Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Custom Dashboard & Login Page WordPress plugin before 7.0 does not sanitise some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-02-01 Fixed in 7.0 CWE-79
Open these records in search →