Read the docs

Hiweb

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Hiweb records in CISA KEV

No Hiweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Migration Simple · all components

Priority MEDIUM 60

The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-pri…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2024-01-16 No fix listed CWE-79
Open these records in search →