Lana

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Lana records in CISA KEV

No Lana vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lana Downloads Manager 2 records MEDIUM Lana Shortcodes 1 record MEDIUM

Records

1 record in Lana Shortcodes · all components

TI-2023-03153 CVE-2023-3372 · GHSA-497h-jp43-7hhx

Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS

MEDIUM 58

The Lana Shortcodes WordPress plugin before 1.2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which allows users with the contrib…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00485 Published 2024-01-16 Fixed in 1.2.0 CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0