onesignal

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

onesignal records in CISA KEV

No onesignal vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Onesignal-free-web-push-notifications · all components

TI-2019-11894 CVE-2019-15827 · GHSA-7wqj-39p4-cqvr

LOW 27

The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01063 Published 2019-08-30 No fix listed CWE-79