Vendors / SecureSubmit Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now SecureSubmit records in CISA KEV No SecureSubmit vulnerabilities are listed in CISA KEV.
Priority LOW 33
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecureSubmit Heartland Management Terminal allows Reflected XSS.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.0037 · Published 2025-03-03 · No fix listed CWE-79
Priority LOW 30
Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Retrieve Embedded Sensitive Data.This issue affects WP SecureSubmit: from n/a through <= 1.5.20.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00359 · Published 2025-01-07 · No fix listed CWE-862
Priority LOW 20
Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SecureSubmit: from n/a through <= 1.5.20.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0033 · Published 2025-01-07 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0