MegaMain

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

MegaMain records in CISA KEV

No MegaMain vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mega Main Menu 1 record LOW

Records

1 record in Mega Main Menu · all components

TI-2023-01487 CVE-2023-1575 · GHSA-xj4g-47qc-vhww

Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting

LOW 25

The Mega Main Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00373 Published 2023-03-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0