Read the docs

Embed Swagger Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Embed Swagger Project records in CISA KEV

No Embed Swagger Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Embed Swagger 1 record LOW

Records

1 record in Embed Swagger · all components

TI-2022-00306 CVE-2022-0381 · GHSA-rv3f-j8c3-vgp8

Embed Swagger <= 1.0.0 Reflected Cross-Site Scripting

Priority LOW 34

The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file which allows attack…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03865 Published 2022-02-04 No fix listed CWE-79
Open these records in search →