Phonetrack

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phonetrack records in CISA KEV

No Phonetrack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phonetrack Meu Site Manager 1 record LOW

Records

1 record

TI-2021-06820 CVE-2021-24534 · GHSA-2cr7-5qfv-vrmw

PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS

LOW 25

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "php_id" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-16 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0