Read the docs

Post Highlights Projects

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Post Highlights Projects records in CISA KEV

No Post Highlights Projects vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 31

Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to ajax/ph_save.…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01896 Published 2017-10-16 No fix listed CWE-79
Open these records in search →