Read the docs

Paris Holley

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Paris Holley records in CISA KEV

No Paris Holley vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fantastic Elasticsearch 1 record MEDIUM

Records

2 records

TI-2024-12266 CVE-2024-13221 · GHSA-x3vp-whxw-pj5c

Fantastic Elasticsearch <= 4.1.0 - Reflected XSS

Priority MEDIUM 60

The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0061 Published 2025-01-31 No fix listed CWE-79
TI-2025-42305 CVE-2025-68846 · GHSA-f6pr-2mv6-45fq

WordPress Asynchronous Javascript plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paris Holley Asynchronous Javascript asynchronous-javascript allows Reflected XSS.This issue affects Asynchronous Java…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00208 Published 2026-02-20 No fix listed CWE-79
Open these records in search →