Light Messages Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Light Messages Project records in CISA KEV

No Light Messages Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Light Messages 1 record LOW

Records

1 record

TI-2021-06821 CVE-2021-24535 · GHSA-6g8x-82fh-m598

Light Messages <= 1.0 - CSRF to Stored XSS

LOW 27

The Light Messages WordPress plugin through 1.0 is lacking CSRF check when updating it's settings, and is not sanitising its Message Content in them (even with the unfiltered_html disallowed).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00412 Published 2021-08-16 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0