Read the docs

Fetch Designs

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Fetch Designs records in CISA KEV

No Fetch Designs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sign-up Sheets 4 records MEDIUM

Records

4 records in Sign-up Sheets · all components

TI-2024-05578 CVE-2024-6020 · GHSA-wwjw-jqq2-7xjv

Sign-up Sheets < 2.2.13 - Reflected XSS

Priority MEDIUM 60

The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-09-04 Fixed in 2.2.13 CWE-79
TI-2021-06731 CVE-2021-24441 · GHSA-c5xg-pgx2-gmrf

Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

Priority LOW 37

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01308 Published 2021-07-12 Fixed in 1.0.14 CWE-1236
TI-2021-06730 CVE-2021-24440 · GHSA-q7cx-mv5x-6h53

Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 23

The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-07-12 Fixed in 1.0.14 CWE-79
Open these records in search →