Read the docs

DuoGeek

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

DuoGeek records in CISA KEV

No DuoGeek vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Domain Replace 1 record LOW Duofaq-responsive-flat-simple-faq 1 record LOW Simple Amazon Affiliate 1 record LOW Simple Image Gallery 1 record LOW

Records

1 record in Domain Replace · all components

TI-2022-01105 CVE-2022-1218 · GHSA-qjq8-6wjp-3w9f

Domain Replace <= 1.3.8 - Reflected Cross-Site Scripting

Priority LOW 29

The Domain Replace WordPress plugin through 1.3.8 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-23 No fix listed CWE-79
Open these records in search →