Read the docs

Foxy-shop

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Foxy-shop records in CISA KEV

No Foxy-shop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Foxyshop 1 record LOW

Records

1 record

TI-2022-01107 CVE-2022-1220 · GHSA-6qp6-vfxq-qp9j

FoxyShop < 4.8.2 - Reflected Cross-Site Scripting

Priority LOW 29

The FoxyShop WordPress plugin before 4.8.2 does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2022-07-11 Fixed in 4.8.2 CWE-79
Open these records in search →