Read the docs

nextendweb

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nextendweb records in CISA KEV

No nextendweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Facebook Connect · all components

Priority LOW 25

Cross-site scripting (XSS) vulnerability in the new_fb_sign_button function in nextend-facebook-connect.php in Nextend Facebook Connect plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web sc…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02699 Published 2015-06-24 No fix listed CWE-79
Open these records in search →