Gistpress Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gistpress Project records in CISA KEV

No Gistpress Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2020-06821 CVE-2020-8498 · GHSA-xf44-j366-mwxm

LOW 27

XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01211 Published 2020-01-30 No fix listed CWE-79