Read the docs

Milan Petrovic

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Milan Petrovic records in CISA KEV

No Milan Petrovic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gd Bbpress Attachments 3 records LOW Coreactivity 2 records HIGH Gd Rating System 2 records LOW Gd Security Headers 2 records LOW Gd Star Rating 2 records LOW Gd Mail Queue 1 record LOW

Records

1 record in Gd Mail Queue · all components

TI-2023-02926 CVE-2023-3122 · GHSA-xch4-7fxf-g24v

GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email

Priority LOW 38

The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00462 Published 2023-07-12 No fix listed CWE-79
Open these records in search →