Read the docs

Paris Holley

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Paris Holley records in CISA KEV

No Paris Holley vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fantastic Elasticsearch 1 record MEDIUM

Records

1 record in Fantastic Elasticsearch · all components

TI-2024-12266 CVE-2024-13221 · GHSA-x3vp-whxw-pj5c

Fantastic Elasticsearch <= 4.1.0 - Reflected XSS

Priority MEDIUM 60

The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high priv…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0061 Published 2025-01-31 No fix listed CWE-79
Open these records in search →