Read the docs

f1logic

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

f1logic records in CISA KEV

No f1logic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Custom Field Manager 1 record MEDIUM Insert Php Code Snippet 1 record LOW

Records

1 record in Insert Php Code Snippet · all components

TI-2024-00608 CVE-2024-0658 · GHSA-2g72-wghv-7rm3

Insert PHP Code Snippet <= 1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 22

The Insert PHP Code Snippet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user's name when accessing the insert-php-code-snippet-manage page in all versions up to, and including, 1.3.4 due to…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00337 Published 2024-02-20 No fix listed CWE-79
Open these records in search →