Read the docs

emarket-design

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

emarket-design records in CISA KEV

No emarket-design vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Request A Quote 5 records MEDIUM Youtube Video Gallery 2 records LOW Best Contact Management Software 1 record LOW Customer Service Software & Support Ticket System 1 record LOW Event Rsvp And Simple Event Management 1 record LOW Wp Easy Contact 1 record LOW

Records

5 records in Request A Quote · all components

TI-2024-05779 CVE-2024-6231 · GHSA-8r7f-vjf7-pvp7

Request a Quote < 2.4.1 - Admin+ Stored XSS

Priority MEDIUM 60

The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2024-07-23 Fixed in 2.4.1 CWE-79
TI-2022-02068 CVE-2022-2240 · GHSA-c759-j56j-j6v3

Request a Quote <= 2.3.7 - CSV Injection

Priority MEDIUM 41

The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users to attach a malicious CSV file to a quote, which could lead to a CSV injection once an admin downloa…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01426 Published 2022-07-25 No fix listed CWE-1236
TI-2021-06711 CVE-2021-24420 · GHSA-fj4v-mpc8-vg58

Request a Quote < 2.3.4 - Authenticated Stored XSS

Priority LOW 25

The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the '…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-07-12 Fixed in 2.3.4 CWE-79
TI-2022-02067 CVE-2022-2239 · GHSA-xrf7-mwrj-rgjc

Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Request a Quote WordPress plugin before 2.3.9 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capab…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00647 Published 2022-07-25 Fixed in 2.3.9
TI-2021-06776 CVE-2021-24489 · GHSA-gqjm-7fj6-9xvx

Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00643 Published 2021-10-25 Fixed in 2.3.9 CWE-79
Open these records in search →