Sumo

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Sumo records in CISA KEV

No Sumo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Social Share Boost · all components

TI-2023-10506 CVE-2023-25033 · GHSA-mj8c-5c4j-5q58

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-10-06 No fix listed CWE-352

TI-2023-09502 CVE-2023-23688 · GHSA-365v-p82c-m3cj

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-05-15 No fix listed CWE-79

TI-2023-10517 CVE-2023-25044 · GHSA-35g9-c897-73x7

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-09-01 No fix listed CWE-79