cyberhobo

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

cyberhobo records in CISA KEV

No cyberhobo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Geo Mashup 3 records MEDIUM

Records

3 records in Geo Mashup · all components

TI-2018-10173 CVE-2018-14071 · GHSA-5mfc-mgw8-gff8

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.

MEDIUM 48

The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03054 Published 2018-07-16 No fix listed CWE-20

TI-2024-29597 CVE-2024-44008 · GHSA-p733-9rpx-xwcp

WordPress Geo Mashup plugin <= 1.13.12 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through <= 1.13.12.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00313 Published 2024-09-17 No fix listed CWE-79

TI-2015-01260 CVE-2015-1383 · GHSA-5x5v-v8qh-gwrg

Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup…

LOW 24

Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01959 Published 2015-02-02 No fix listed CWE-79

Open these records in search →

Critical	1
High	4
Medium	7
Low	0
No CVSS	0