Read the docs

Sprintexperts

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sprintexperts records in CISA KEV

No Sprintexperts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Wp Extra Fields · all components

TI-2024-12672 CVE-2024-13632 · GHSA-mrrm-jfxh-4cwj

WP Extra Fields <= 1.0.1 - Reflected XSS

Priority MEDIUM 64

The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege us…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2025-02-26 No fix listed CWE-79
Open these records in search →