Vendors / Olevmedia Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Olevmedia records in CISA KEV No Olevmedia vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0049 · Published 2023-02-27 · No fix listed
Priority LOW 30
The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00867 · Published 2019-09-26 · No fix listed CWE-352
Priority LOW 29
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin <= 1.1.9 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00361 · Published 2023-05-03 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 0 3 0 0
