Read the docs

new-nine

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

new-nine records in CISA KEV

No new-nine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Font Awesome 4 Menus 2 records LOW

Records

2 records

TI-2023-04346 CVE-2023-4718 · GHSA-jgxj-j49j-8r95

Font Awesome 4 Menus <= 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00508 Published 2023-09-02 No fix listed CWE-79
TI-2022-03509 CVE-2022-3829 · GHSA-w28j-4ff9-m8cm

Font Awesome 4 Menus <= 4.7.0 - Admin+ Stored XSS

Priority LOW 23

The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00524 Published 2024-01-16 No fix listed CWE-79
Open these records in search →