Simple Tooltips Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Simple Tooltips Project records in CISA KEV

No Simple Tooltips Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Tooltips 2 records MEDIUM

Records

2 records in Simple Tooltips · all components

TI-2022-04422 CVE-2022-4826 · GHSA-f234-4mv2-6gq9

Simple Tooltips < 2.1.4 - Contributor+ Stored XSS via Shortcode

MEDIUM 58

The Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2023-02-06 Fixed in 2.1.4

TI-2023-11203 CVE-2023-25958 · GHSA-xcj4-xfx8-7jqq

WordPress Simple Tooltips Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Justin Saad Simple Tooltips plugin <= 2.1.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-05-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0