Read the docs

Jontasc

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Jontasc records in CISA KEV

No Jontasc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sailthru Triggermail 3 records MEDIUM

Records

3 records in Sailthru Triggermail · all components

TI-2024-03993 CVE-2024-4290 · GHSA-xrf7-7j85-g93c

Sailthru Triggermail <= 1.1 - Admin+ Stored XSS

Priority MEDIUM 64

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the u…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00388 Published 2024-05-21 No fix listed CWE-79
TI-2024-10325 CVE-2024-11141 · GHSA-874p-6rxv-4ppg

Sailthru Triggermail < 1.1 - Subscriber+ Stored XSS

Priority MEDIUM 60

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings and is missing CSRF protection which could allow subscribers to perform Stored Cross-Site Scripting attacks even whe…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00176 Published 2025-05-15 No fix listed CWE-79
TI-2024-03992 CVE-2024-4289 · GHSA-mqv8-r98f-v6vp

Sailthru Triggermail <= 1.1 - Reflected XSS

Priority MEDIUM 60

The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape various parameters before outputting them back in pages and attributes, leading to a Reflected Cross-Site Scripting which could be used a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00367 Published 2024-05-21 No fix listed CWE-79
Open these records in search →