Inventorypress Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Inventorypress Project records in CISA KEV

No Inventorypress Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Inventorypress 1 record MEDIUM

Records

1 record in Inventorypress · all components

TI-2023-02410 CVE-2023-2579 · GHSA-j4gg-9rwv-9gxg

InventoryPress <= 1.7 - Author+ Stored XSS

MEDIUM 58

The InventoryPress WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow users with the role of author and above to perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01129 Published 2023-07-17 No fix listed

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0