Read the docs

Holoborodko

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Holoborodko records in CISA KEV

No Holoborodko vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Quicklatex 2 records MEDIUM

Records

2 records

TI-2024-05086 CVE-2024-5472 · GHSA-33v5-9rfm-w3f4

WP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color field

Priority MEDIUM 64

The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilte…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00432 Published 2024-07-13 Fixed in 3.8.7 CWE-79
TI-2024-05140 CVE-2024-5529 · GHSA-5c8x-8xxx-22mm

WP QuickLaTeX < 3.8.8 - Admin+ Stored XSS

Priority MEDIUM 55

The WP QuickLaTeX WordPress plugin before 3.8.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilte…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00351 Published 2024-07-22 Fixed in 3.8.8 CWE-79
Open these records in search →