Noah Kagan

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Noah Kagan records in CISA KEV

No Noah Kagan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Scroll Triggered Box 1 record LOW

Records

3 records

TI-2021-16692 CVE-2021-39320 · GHSA-p83h-qp2w-3vv5

underConstruction <= 1.18 - Reflected Cross-Site Scripting

LOW 32

The underConstruction plugin <= 1.18 for WordPress echoes out the raw value of `$GLOBALS['PHP_SELF']` in the ucOptions.php file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02324 Published 2021-09-01 No fix listed CWE-79

TI-2024-16379 CVE-2024-24865 · GHSA-pv6w-6xw6-fcqg

WordPress Scroll Triggered Box Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan Scroll Triggered Box allows Stored XSS.This issue affects Scroll Triggered Box: from n/a through 2.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-02-05 No fix listed CWE-79

TI-2024-20272 CVE-2024-30548 · GHSA-4rrg-fcgc-jrjm

WordPress underConstruction plugin <= 1.21 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan underConstruction allows Stored XSS.This issue affects underConstruction: from n/a through 1.21.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00339 Published 2024-03-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0