Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Target-info records in CISA KEVNo Target-info vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 28
Cross-Site Request Forgery (CSRF) vulnerability in Mark Tilly MyCurator Content Curation plugin <= 3.74 versions.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00234 · Published 2023-07-11 · No fix listed CWE-352
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mtilly MyCurator Content Curation mycurator allows Stored XSS.This issue affects MyCurator Content Curation: from n/a…
CVSS 3.1MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00292 · Published 2024-11-09 · No fix listed CWE-79
Open these records in search →