Read the docs

Thank Me Later Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Thank Me Later Project records in CISA KEV

No Thank Me Later Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Thank Me Later 1 record LOW

Records

1 record

TI-2022-00959 CVE-2022-1063 · GHSA-h8w8-jcpm-p8q5

Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Thank Me Later WordPress plugin through 3.3.4 does not sanitise and escape the Message Subject field before outputting it in the Messages list, which could allow high privileges users such as admin to perform Cross-S…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-04-18 No fix listed CWE-79
Open these records in search →