Read the docs

TemplatesNext

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

TemplatesNext records in CISA KEV

No TemplatesNext vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Templatesnext Toolkit 3 records MEDIUM Onepager 1 record LOW

Records

4 records

TI-2023-00317 CVE-2023-0333 · GHSA-j67r-9w4c-jhx6

TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS

Priority MEDIUM 58

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0049 Published 2023-02-13 Fixed in 3.2.9
TI-2022-04276 CVE-2022-4678 · GHSA-mchv-7c6q-8f6p

TemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0054 Published 2023-02-13 Fixed in 3.2.8
TI-2024-23622 CVE-2024-35753 · GHSA-f8pm-jr2j-2vwf

WordPress TemplatesNext OnePager plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TemplatesNext TemplatesNext OnePager allows Stored XSS.This issue affects TemplatesNext OnePager: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-06-08 No fix listed CWE-79
Open these records in search →