IndiaNIC

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

IndiaNIC records in CISA KEV

No IndiaNIC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Testimonial Plugin 2 records MEDIUM

Records

3 records

TI-2013-04838 CVE-2013-5673 · GHSA-2w3m-vv2j-4cpr

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for…

MEDIUM 42

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testimonial_add action to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06536 Published 2013-09-10 No fix listed CWE-89

TI-2013-04837 CVE-2013-5672 · GHSA-gxxf-63jm-q2wf

Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial…

LOW 36

Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add a testimonia…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03154 Published 2013-09-10 No fix listed CWE-352

TI-2024-17026 CVE-2024-25926 · GHSA-3fj9-c88m-7g9f

WordPress Widgets Controller plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IndiaNIC Widgets Controller allows Reflected XSS.This issue affects Widgets Controller: from n/a through 1.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00333 Published 2024-03-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0