Read the docs

Quick-plugins

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Quick-plugins records in CISA KEV

No Quick-plugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Loan Comparison 1 record MEDIUM Loan Repayment Calculator And Application Form 1 record LOW

Records

2 records

TI-2023-00350 CVE-2023-0366 · GHSA-8296-xh28-2r6c

Loan Comparison < 1.5.3 - Contributor+ Stored XSS via shortcode

Priority MEDIUM 58

The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2023-02-21 Fixed in 1.5.3
TI-2023-27734 CVE-2023-50829 · GHSA-7fwv-xqrr-668w

WordPress Loan Repayment Calculator and Application Form Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aerin Loan Repayment Calculator and Application Form allows Stored XSS.This issue affects Loan Repayment Calculator an…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00335 Published 2023-12-21 No fix listed CWE-79
Open these records in search →