Read the docs

nextendweb

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nextendweb records in CISA KEV

No nextendweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Slider 3 4 records HIGH Facebook Connect 1 record LOW Nextend Facebook Connect 1 record LOW Nextend Social Login 1 record LOW Nextend Twitter Connect 1 record LOW Smart Slider 1 record LOW

Records

1 record in Nextend Social Login · all components

TI-2024-01652 CVE-2024-1775 · GHSA-5jhf-7c6v-c23x

Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_description

Priority LOW 25

The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site Scripting via the ‘error_description’ parameter in all versions up to, and including, 3.1.12 due to insufficie…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0037 Published 2024-03-02 No fix listed CWE-79
Open these records in search →