IZSoft

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

IZSoft records in CISA KEV

No IZSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy Cookies Policy 1 record MEDIUM

Records

1 record

TI-2021-06697 CVE-2021-24405 · GHSA-95hr-f33r-v5jc

Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting

MEDIUM 42

The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users (such as subscriber) to change them.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.10703 Published 2021-07-06 No fix listed CWE-863

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0