Read the docs

GoodLayers

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

GoodLayers records in CISA KEV

No GoodLayers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tour Master 3 records MEDIUM Goodlayers Core 2 records MEDIUM Good Learning Management System 1 record MEDIUM Travel Tour 1 record MEDIUM

Records

2 records in Goodlayers Core · all components

TI-2024-11278 CVE-2024-12163 · GHSA-65f9-48qm-g2v2

GoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG Upload

Priority MEDIUM 62

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00285 Published 2025-01-30 Fixed in 2.1.3 CWE-79
TI-2024-10522 CVE-2024-11357 · GHSA-wpxf-7pwx-p92p

Goodlayers Core < 2.0.10 - Contributor+ Stored XSS

Priority MEDIUM 60

The goodlayers-core WordPress plugin before 2.0.10 does not sanitise and escape some of its settings, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00331 Published 2025-01-02 Fixed in 2.0.10 CWE-79
Open these records in search →