Read the docs

Post Index Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Post Index Project records in CISA KEV

No Post Index Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post Index 1 record LOW

Records

1 record in Post Index · all components

TI-2021-13651 CVE-2021-34637 · GHSA-cv5w-2vh5-xf8p

Post Index <= 0.7.5 Cross-Site Request Forgery to Stored Cross-Site Scripting

Priority LOW 39

The Post Index WordPress plugin is vulnerable to Cross-Site Request Forgery via the OptionsPage function found in the ~/php/settings.php file which allows attackers to inject arbitrary web scripts, in versions up to and…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.007 Published 2021-08-02 No fix listed CWE-352
Open these records in search →