Read the docs

Ko-fi

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ko-fi records in CISA KEV

No Ko-fi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ko-fi Button 1 record LOW

Records

1 record in Ko-fi Button · all components

TI-2023-02113 CVE-2023-2254 · GHSA-5x35-3c26-4v3r

Ko-fi Button < 1.3.3 - Admin+ Stored XSS

Priority LOW 22

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00442 Published 2023-08-16 Fixed in 1.3.3 CWE-79
Open these records in search →