Read the docs

Mpembed

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mpembed records in CISA KEV

No Mpembed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Matterport Shortcode 3 records MEDIUM

Records

3 records

TI-2023-03966 CVE-2023-4290 · GHSA-gx5h-6g66-6r78

WP Matterport Shortcode < 2.1.7 - Reflected XSS

Priority MEDIUM 60

The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected Cross-Site Scripting issues which could be used against high p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-10-16 Fixed in 2.1.7
TI-2023-03965 CVE-2023-4289 · GHSA-hg5g-m3rr-7xx2

WP Matterport Shortcode < 2.1.8 - Contributor+ Stored XSS via shortcode

Priority MEDIUM 58

The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users wit…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-10-16 Fixed in 2.1.8
Open these records in search →