Read the docs

evarisk

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

evarisk records in CISA KEV

No evarisk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Digirisk 1 record LOW

Records

1 record in Digirisk · all components

TI-2023-05478 CVE-2023-5946 · GHSA-gmw9-h883-7gxr

Cross-site scripting in evarisk Digirisk

Priority LOW 28

The Digirisk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'current_group_id' parameter in version 6.0.0.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00433 Published 2023-11-03 No fix listed CWE-79
Open these records in search →