Read the docs

Phd38

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Phd38 records in CISA KEV

No Phd38 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Mediatagger 2 records MEDIUM

Records

2 records in Wp Mediatagger · all components

TI-2024-12160 CVE-2024-13112 · GHSA-42c6-24m9-97gm

WP MediaTagger <= 4.1.1 - Reflected XSS

Priority MEDIUM 60

The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege use…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0061 Published 2025-01-31 No fix listed CWE-79
TI-2024-12149 CVE-2024-13101 · GHSA-rc29-mm29-hmq2

WP MediaTagger <= 4.1.1 - Contributor+ Stored XSS

Priority MEDIUM 58

The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00325 Published 2025-01-31 No fix listed CWE-79
Open these records in search →