springthistle

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

springthistle records in CISA KEV

No springthistle vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-35928 CVE-2024-53730 · GHSA-mv35-fc54-3wf7

WordPress April's Call Posts plugin <= 2.1.1 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in springthistle April's Call Posts aprils-call-posts allows Stored XSS.This issue affects April's Call Posts: from n/a through <= 2.1.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00159 Published 2024-12-02 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0