Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
MERGADO records in CISA KEVNo MERGADO vulnerabilities are listed in CISA KEV.
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Stored XSS.This issue affects Mergado Pack: from n/a through <= 4.2.1.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00177 · Published 2025-04-09 · No fix listed CWE-352
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Cross Site Request Forgery.This issue affects Mergado Pack: from n/a through <= 4.2.1.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00119 · Published 2025-12-31 · No fix listed CWE-352
