hotjar

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

hotjar records in CISA KEV

No hotjar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hotjar 1 record LOW

Records

1 record

TI-2023-01192 CVE-2023-1259 · GHSA-q7vg-v528-qjwj

Hotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting

LOW 26

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjar_site_id in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00616 Published 2023-10-14 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0