SedLex

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

SedLex records in CISA KEV

No SedLex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Quotation 2 records MEDIUM Traffic Manager 2 records LOW Favicon-switcher 1 record LOW Image Zoom 1 record MEDIUM

Records

2 records in Simple Quotation · all components

TI-2022-06985 CVE-2022-22735 · GHSA-533j-r4h4-5hxg

Simple Quotation <= 1.3.2 - Subscriber+ SQL injection

MEDIUM 41

The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenti…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01318 Published 2022-03-14 No fix listed CWE-89

TI-2022-06984 CVE-2022-22734 · GHSA-fj9g-qqr2-c949

Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site Scripting

LOW 29

The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 No fix listed CWE-116

Open these records in search →

Critical	0
High	3
Medium	5
Low	0
No CVSS	0