Stageshow Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Stageshow Project records in CISA KEV

No Stageshow Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Stageshow 3 records LOW

Records

3 records in Stageshow · all components

TI-2015-04595 CVE-2015-5461 · GHSA-7hh5-68r5-f7q3

Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the…

LOW 38

Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing atta…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.06238 Published 2015-07-08 No fix listed

TI-2025-05142 CVE-2025-5703 · GHSA-cw23-897m-qmhx

StageShow <= 10.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchor Parameter

LOW 28

The StageShow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘anchor’ parameter in all versions up to, and including, 10.0.3 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00264 Published 2025-06-06 No fix listed CWE-79

TI-2024-12744 CVE-2024-13705 · GHSA-qmjp-x75f-m6mw

StageShow <= 9.8.6 - Reflected Cross-Site Scripting

LOW 27

The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 9.8.6.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00359 Published 2025-01-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0