Read the docs

Lester Chan

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Lester Chan records in CISA KEV

No Lester Chan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-postratings 5 records MEDIUM Wp-downloadmanager 1 record LOW Wp-email 1 record MEDIUM Wp-postviews 1 record LOW Wp-useronline 1 record MEDIUM

Records

1 record in Wp-useronline · all components

TI-2023-05118 CVE-2023-5560 · GHSA-3v9m-2r3c-48wc

WP-UserOnline < 2.88.3 - Unauthenticated Stored XSS

Priority MEDIUM 60

The WP-UserOnline WordPress plugin before 2.88.3 does not sanitise and escape the X-Forwarded-For header before outputting its content on the page, which allows unauthenticated users to perform Cross-Site Scripting attac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0051 Published 2023-11-27 Fixed in 2.88.3 CWE-79
Open these records in search →