Read the docs

Inboundnow

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Inboundnow records in CISA KEV

No Inboundnow vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Call To Action · all components

Priority LOW 32

Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02645 Published 2017-09-11 No fix listed CWE-79
Open these records in search →