Infinitescript

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Infinitescript records in CISA KEV

No Infinitescript vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-bibtex 2 records LOW

Records

2 records

TI-2024-12619 CVE-2024-13578 · GHSA-mr95-3xfg-2p77

WP-BibTeX <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The WP-BibTeX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'WpBibTeX' shortcode in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00246 Published 2025-02-18 No fix listed CWE-79

TI-2024-11138 CVE-2024-12005 · GHSA-6mfr-g9g7-ccpv

WP-BibTeX <= 3.0.1 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting

LOW 26

The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0019 Published 2025-01-21 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0