Read the docs

Marco Milesi

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Marco Milesi records in CISA KEV

No Marco Milesi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Wp Attachments · all components

Priority MEDIUM 55

The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00583 Published 2022-11-14 Fixed in 5.0.5 CWE-79
TI-2022-03965 CVE-2022-4330 · GHSA-7cjc-c9jv-7878

WP Attachments < 5.0.6 - Admin+ Stored XSS

Priority LOW 23

The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-01-16 Fixed in 5.0.6 CWE-79
Open these records in search →