Read the docs

Flex Local Fonts Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Flex Local Fonts Project records in CISA KEV

No Flex Local Fonts Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flex Local Fonts 1 record LOW

Records

1 record

TI-2021-07064 CVE-2021-24782 · GHSA-fp4x-73jw-phj9

Flex Local Fonts <= 1.0.0 - Admin+ Stored Cross-Site-Scripting

Priority LOW 23

The Flex Local Fonts WordPress plugin through 1.0.0 does not escape the Class Name field when adding a font, which could allow hight privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html c…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-12-13 No fix listed CWE-79
Open these records in search →