Read the docs

Status301

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Status301 records in CISA KEV

No Status301 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coolclock 1 record LOW Easy Fancybox 1 record LOW

Records

1 record in Easy Fancybox · all components

TI-2019-12389 CVE-2019-16524 · GHSA-h6hv-v4xc-8xxh

The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible…

Priority LOW 24

The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01024 Published 2019-09-26 No fix listed CWE-79
Open these records in search →