Read the docs

Freshlight Lab

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Freshlight Lab records in CISA KEV

No Freshlight Lab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Menu Image, Icons Made Easy 2 records LOW Wp Mobile Menu 1 record LOW

Records

4 records

TI-2024-34822 CVE-2024-51918 · GHSA-v8mh-p5f4-xfcq

WordPress Pay With Stripe plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Freshlight Lab Pay With Stripe payments-stripe-gateway allows DOM-Based XSS.This issue affects Pay With Stripe: from n…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-11-19 No fix listed CWE-79
TI-2023-27731 CVE-2023-50826 · GHSA-j28j-v2qr-58x6

WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Freshlight Lab Menu Image, Icons made easy allows Stored XSS.This issue affects Menu Image, Icons made easy: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00352 Published 2023-12-21 No fix listed CWE-79
TI-2022-00373 CVE-2022-0450 · GHSA-rwc4-w23c-gc77

Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting

Priority LOW 25

The Menu Image, Icons made easy WordPress plugin before 3.0.6 does not have authorisation and CSRF checks when saving menu settings, and does not validate, sanitise and escape them.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00604 Published 2022-03-28 Fixed in 3.0.6 CWE-116
TI-2024-03719 CVE-2024-3987 · GHSA-9grv-rp7x-5jp8

Cross-site scripting in takanakui WP Mobile Menu – The Mobile-Friendly Responsive Menu

Priority LOW 24

The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input saniti…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00272 Published 2024-06-07 No fix listed CWE-79
Open these records in search →