Vendors / Sermon Browser Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Sermon Browser Project records in CISA KEV No Sermon Browser Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary fil…
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00628 · Published 2022-03-28 · No fix listed CWE-352
Priority LOW 29
The sermon-browser plugin before 0.45.16 for WordPress has multiple XSS issues.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00913 · Published 2019-08-21 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 1 0 0
