Read the docs

DyadyaLesha

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

DyadyaLesha records in CISA KEV

No DyadyaLesha vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dl Robots.txt 1 record MEDIUM Dl Verification 1 record MEDIUM Dl Yandex Metrika 1 record MEDIUM

Records

1 record in Dl Yandex Metrika · all components

TI-2024-05997 CVE-2024-6462 · GHSA-9g8q-q3hj-343m

DL Yandex Metrika <= 1.2 - Admin+ Stored XSS

Priority MEDIUM 55

The DL Yandex Metrika WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfi…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2025-05-15 No fix listed CWE-79
Open these records in search →