Read the docs

draftpress

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

draftpress records in CISA KEV

No draftpress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Header Footer Code Manager 4 records MEDIUM My Site Audit 1 record LOW

Records

1 record in My Site Audit · all components

TI-2021-06735 CVE-2021-24445 · GHSA-9x8r-8v3j-4x8m

My Site Audit <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 26

The My Site Audit WordPress plugin through 1.2.4 does not sanitise or escape the Audit Name field when creating an audit, allowing high privilege users to set JavaScript payloads in them, even when he unfiltered_html cap…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00656 Published 2021-08-16 No fix listed CWE-79
Open these records in search →