Read the docs

dFactory

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

dFactory records in CISA KEV

No dFactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Responsive Lightbox 6 records HIGH Download Attachments 1 record LOW Post Views Counter 1 record LOW Responsive Lightbox & Gallery 1 record LOW

Records

1 record in Post Views Counter · all components

TI-2021-06896 CVE-2021-24613 · GHSA-x53f-v73q-grpf

Post Views Counter < 1.3.5 - Authenticated Stored XSS

Priority LOW 23

The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-09-20 Fixed in 1.3.5 CWE-79
Open these records in search →