Read the docs

H5P

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

H5P records in CISA KEV

No H5P vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
H5p 1 record MEDIUM

Records

1 record in H5p · all components

TI-2024-02913 CVE-2024-3111 · GHSA-p658-759g-r8hf

H5P < 1.15.8 - Contributor+ Stored XSS

Priority MEDIUM 64

The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00315 Published 2024-06-27 Fixed in 1.15.8 CWE-79
Open these records in search →