Json-content-importer

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Json-content-importer records in CISA KEV

No Json-content-importer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Json Content Importer 3 records LOW

Records

3 records in Json Content Importer · all components

TI-2024-25957 CVE-2024-38723 · GHSA-qq4x-r2pp-5qfw

WordPress Get Use APIs – JSON Content Importer plugin <= 1.5.6 - Server Side Request Forgery (SSRF) vulnerability

LOW 28

Server-Side Request Forgery (SSRF) vulnerability in Bernhard Kux JSON Content Importer.This issue affects JSON Content Importer: from n/a through 1.5.6.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0025 Published 2024-07-22 No fix listed CWE-918

TI-2023-05756 CVE-2023-6268 · GHSA-p367-m3vv-728q

JSON Content Importer < 1.5.4 - Reflected XSS

LOW 28

The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2023-12-26 Fixed in 1.5.4 CWE-79

TI-2023-10795 CVE-2023-25485 · GHSA-rv59-78h6-2m84

WordPress JSON Content Importer Plugin <= 1.3.15 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bernhard Kux JSON Content Importer plugin <= 1.3.15 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-04-25 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0