TI-2016-04218 CVE-2016-4875 · GHSA-4pqq-jprg-84vhMultiple cross-site scripting (XSS) vulnerabilities in the IVYWE (1) Assist plugin before…Priority LOW 31Multiple cross-site scripting (XSS) vulnerabilities in the IVYWE (1) Assist plugin before 1.1.2.test20160906, (2) dataBox plugin before 0.0.0.20160906, and (3) userBox plugin before 0.0.0.20160906 for Geeklog allow remot…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0168 · Published 2017-04-14 · No fix listed CWE-79