Read the docs

Loan Comparison Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Loan Comparison Project records in CISA KEV

No Loan Comparison Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Loan Comparison 1 record MEDIUM

Records

1 record

TI-2023-00419 CVE-2023-0442 · GHSA-545v-3hf5-cppv

Loan Comparison < 1.5.2 - Reflected XSS via shortcode

Priority MEDIUM 60

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its query parameters before outputting them back in a page/post via an embedded shortcode, which could allow an attacker to inject ja…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-02-21 Fixed in 1.5.3
Open these records in search →