Q2w3

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Q2w3 records in CISA KEV

No Q2w3 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Q2w3 Post Order 1 record LOW

Records

1 record

TI-2023-25692 CVE-2023-47521 · GHSA-gr4q-fjfj-g89j

WordPress Q2W3 Post Order Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max Bond, AndreSC Q2W3 Post Order allows Reflected XSS.This issue affects Q2W3 Post Order: from n/a through 1.2.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00403 Published 2023-11-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0