Read the docs

nextendweb

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nextendweb records in CISA KEV

No nextendweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Slider 3 4 records HIGH Facebook Connect 1 record LOW Nextend Facebook Connect 1 record LOW Nextend Social Login 1 record LOW Nextend Twitter Connect 1 record LOW Smart Slider 1 record LOW

Records

1 record in Nextend Facebook Connect · all components

TI-2014-07213 CVE-2014-8800 · GHSA-c3fm-56j2-cm64

Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fb_login_…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03753 Published 2014-12-05 No fix listed CWE-79
Open these records in search →