Read the docs

odude

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

odude records in CISA KEV

No odude vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Crypto Tool 3 records MEDIUM Flexi 1 record LOW User Post Gallery 1 record HIGH

Records

1 record in Flexi · all components

TI-2022-00372 CVE-2022-0449 · GHSA-hgvr-3m27-2x5c

Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting

Priority LOW 29

The Flexi WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 Fixed in 4.20 CWE-79
Open these records in search →