Read the docs

RealFaviconGenerator

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

RealFaviconGenerator records in CISA KEV

No RealFaviconGenerator vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Favicon By Realfavicongenerator 3 records LOW

Records

3 records

TI-2022-00394 CVE-2022-0471 · GHSA-ccvf-jhvh-4w9p

Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting

Priority LOW 29

The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cros…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00876 Published 2022-04-11 Fixed in 1.3.23 CWE-79
TI-2021-06727 CVE-2021-24437 · GHSA-cw69-2q7p-cmfx

Favicon by RealFaviconGenerator <= 1.3.20 - Reflected Cross-Site Scripting (XSS)

Priority LOW 29

The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-08-30 No fix listed CWE-79
Open these records in search →