Nexos Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nexos Project records in CISA KEV

No Nexos Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Nexos · all components

TI-2020-12110 CVE-2020-15363 · GHSA-v8w8-qmx2-j9r2

MEDIUM 51

The Nexos theme through 1.7 for WordPress allows side-map/?search_order= SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05901 Published 2020-06-28 No fix listed CWE-89

TI-2020-12111 CVE-2020-15364 · GHSA-f6x9-6r77-9cvr

LOW 34

The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03729 Published 2020-06-28 No fix listed CWE-79