Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Shamim Hasan records in CISA KEVNo Shamim Hasan vulnerabilities are listed in CISA KEV.
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in Shamim Hasan Custom Functions Plugin custom-functions allows Stored XSS.This issue affects Custom Functions Plugin: from n/a through <= 1.1.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00139 · Published 2025-04-24 · No fix listed CWE-352
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00205 · Published 2026-10-06 · No fix listed CWE-79
