Vendors / Mahlamusa Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Mahlamusa records in CISA KEV No Mahlamusa vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00259 · Published 2023-10-16 · No fix listed CWE-352
Priority LOW 34
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injection.This issue affects Who Hit The Page – Hit Counter: from…
CVSS 3.1 HIGH 7.6· Network · High privileges · No interaction · EPSS 0.00654 · Published 2023-12-18 · No fix listed CWE-89
Priority LOW 27
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00407 · Published 2023-08-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High2 Medium1 Low0 No CVSS0