Read the docs

Rapidexp

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Rapidexp records in CISA KEV

No Rapidexp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Rapidexpcart · all components

TI-2023-00492 CVE-2023-0520 · GHSA-36pc-5vqw-g5vm

RapidExpCart <= 1.0 - Stored XSS via CSRF

Priority MEDIUM 58

The RapidExpCart WordPress plugin through 1.0 does not sanitize and escape the url parameter in the rapidexpcart endpoint before storing it and outputting it back in the page, leading to a Stored Cross-Site Scripting vul…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00239 Published 2023-05-15 No fix listed
Open these records in search →