Harsh

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Harsh records in CISA KEV

No Harsh vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-17689 CVE-2025-23922 · GHSA-226x-xgh7-2wwc

WordPress iSpring Embedder plugin <= 1.0 - CSRF to Arbitrary File Upload vulnerability

MEDIUM 51

Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder embed-ispring allows Upload a Web Shell to a Web Server.This issue affects iSpring Embedder: from n/a through <= 1.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01096 Published 2025-01-16 No fix listed CWE-352

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0