PixelYourSite

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

PixelYourSite records in CISA KEV

No PixelYourSite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pixelyoursite 5 records LOW Product Catalog Feed 3 records MEDIUM Pixelyoursite Pro 1 record LOW

Records

3 records in Product Catalog Feed · all components

TI-2023-01697 CVE-2023-1805 · GHSA-34vm-8hc8-fc49

Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS

MEDIUM 60

The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-05-02 Fixed in 2.1.1 CWE-79

TI-2023-01696 CVE-2023-1804 · GHSA-8gj6-vrp5-c3p9

Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS

MEDIUM 60

The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00519 Published 2023-05-02 Fixed in 2.1.1 CWE-79

TI-2023-27228 CVE-2023-49824 · GHSA-cm9g-3fq5-vqfq

WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This issue affects Product Catalog Feed by PixelYourSite: from n/a through 2.1.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00249 Published 2023-12-17 No fix listed CWE-352

Open these records in search →

Critical	1
High	10
Medium	12
Low	0
No CVSS	0